https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 08 May 2026 06:36:59 +0000 https://vulnerability.circl.lu/sighting/2bf1288c-b292-413e-b46a-243c05da42f0/export {"uuid": "2bf1288c-b292-413e-b46a-243c05da42f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-10590", "type": "seen", "source": "https://t.me/cvedetector/12723", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-10590 - WordPress Opt-In Downloads File Upload Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-10590 \nPublished : Dec. 12, 2024, 5:15 a.m. | 43\u00a0minutes ago \nDescription : The Opt-In Downloads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the admin_upload() function in all versions up to, and including, 4.07. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Due to the presence of an .htaccess file, this can only be exploited to achieve RCE on NGINX servers, unless another vulnerability is present. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"12 Dec 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:08:13.000000Z"} {"uuid": "2bf1288c-b292-413e-b46a-243c05da42f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-10590", "type": "seen", "source": "https://t.me/cvedetector/12723", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-10590 - WordPress Opt-In Downloads File Upload Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-10590 \nPublished : Dec. 12, 2024, 5:15 a.m. | 43\u00a0minutes ago \nDescription : The Opt-In Downloads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the admin_upload() function in all versions up to, and including, 4.07. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Due to the presence of an .htaccess file, this can only be exploited to achieve RCE on NGINX servers, unless another vulnerability is present. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"12 Dec 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:08:13.000000Z"} https://vulnerability.circl.lu/sighting/2bf1288c-b292-413e-b46a-243c05da42f0/export Thu, 12 Dec 2024 07:08:13 +0000