https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:33:46 +0000 https://cve.radiocsirt.org/vuln/cve-2026-9067 <p><strong>Affected:</strong> Unknown Schema &amp; Structured Data for WP &amp; AMP</p> <p>The Schema &amp; Structured Data for WP &amp; AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual content of uploaded files against the endpoint&#39;s intended media type, allowing unauthenticated users to upload any file type accepted by WordPress&#39;s media library through endpoints that should only accept images or videos.</p> <p><strong>Affected:</strong> Unknown Schema &amp; Structured Data for WP &amp; AMP</p> <p>The Schema &amp; Structured Data for WP &amp; AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual content of uploaded files against the endpoint&#39;s intended media type, allowing unauthenticated users to upload any file type accepted by WordPress&#39;s media library through endpoints that should only accept images or videos.</p> https://cve.radiocsirt.org/vuln/cve-2026-9067