Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 22:48:23 +0000 CVE-2025-12057 — WavePlayer < 3.8.0 - Unauthenticated Arbitrary File Upload https://cve.radiocsirt.org/vuln/cve-2025-12057 <p><strong>Affected:</strong> Unknown WavePlayer</p> <p>The WavePlayer WordPress plugin before 3.8.0 does not have authorization in an AJAX action as well as does not validate the file to be copied locally, allowing unauthenticated users to upload arbitrary file on the server and lead to RCE</p> <p><strong>Affected:</strong> Unknown WavePlayer</p> <p>The WavePlayer WordPress plugin before 3.8.0 does not have authorization in an AJAX action as well as does not validate the file to be copied locally, allowing unauthenticated users to upload arbitrary file on the server and lead to RCE</p> https://cve.radiocsirt.org/vuln/cve-2025-12057