https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T22:10:57.684379+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-118423 fkie_cve-2026-118423 2026-11-09T22:10:57.702860+00:00

The WP Libre Form WordPress plugin 1.5.0.1 does not validate the type of files uploaded through its form submissions, allowing unauthenticated attackers to upload PHP files to a web-accessible location and execute them, leading to remote code execution.

 https://db.gcve.eu/vuln/ghsa-mhrf-qjwq-4j74 GHSA-mhrf-qjwq-4j74 2026-11-09T22:10:57.702913+00:00

The WP Libre Form WordPress plugin 1.5.0.1 does not validate the type of files uploaded through its form submissions, allowing unauthenticated attackers to upload PHP files to a web-accessible location and execute them, leading to remote code execution.