Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:31:25 +0000 CVE-2023-4536 — My Account Page Editor < 1.3.2 - Subscriber+ Arbitrary File Upload https://cve.radiocsirt.org/vuln/cve-2023-4536 <p><strong>Affected:</strong> Unknown My Account Page Editor</p> <p>The My Account Page Editor WordPress plugin before 1.3.2 does not validate the profile picture to be uploaded, allowing any authenticated users, such as subscriber to upload arbitrary files to the server, leading to RCE</p> <p><strong>Affected:</strong> Unknown My Account Page Editor</p> <p>The My Account Page Editor WordPress plugin before 1.3.2 does not validate the profile picture to be uploaded, allowing any authenticated users, such as subscriber to upload arbitrary files to the server, leading to RCE</p> https://cve.radiocsirt.org/vuln/cve-2023-4536