Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 16:44:22 +0000 CVE-2024-13544 — Zarinpal Paid Downloads <= 2.3 - Admin+ Arbitrary File Upload https://cve.radiocsirt.org/vuln/cve-2024-13544 <p><strong>Affected:</strong> Unknown Zarinpal Paid Download</p> <p>The Zarinpal Paid Download WordPress plugin through 2.3 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)</p> <p><strong>Affected:</strong> Unknown Zarinpal Paid Download</p> <p>The Zarinpal Paid Download WordPress plugin through 2.3 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)</p> https://cve.radiocsirt.org/vuln/cve-2024-13544