https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 15:34:09 +0000 https://cve.radiocsirt.org/vuln/cve-2022-0537 <p><strong>Affected:</strong> Unknown MapPress Maps for WordPress</p> <p>The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS settings and upload arbitrary files to the site through the &#34;ajax_save&#34; function. The file is written relative to the current &#39;s stylesheet directory, and a .php file extension is added. No validation is performed on the content of the file, triggering an RCE vulnerability by uploading a web shell. Further the name parameter is not sanitized, allowing the payload to be uploaded to any directory to which the server has write access.</p> <p><strong>Affected:</strong> Unknown MapPress Maps for WordPress</p> <p>The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS settings and upload arbitrary files to the site through the &#34;ajax_save&#34; function. The file is written relative to the current &#39;s stylesheet directory, and a .php file extension is added. No validation is performed on the content of the file, triggering an RCE vulnerability by uploading a web shell. Further the name parameter is not sanitized, allowing the payload to be uploaded to any directory to which the server has write access.</p> https://cve.radiocsirt.org/vuln/cve-2022-0537