https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-13T10:37:50.231951+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-124653 fkie_cve-2026-124653 2026-11-13T10:37:50.233850+00:00

The Mine CloudVod WordPress plugin before 2.6.6 does not restrict who can request cloud storage upload credentials from several of its REST API routes, allowing unauthenticated attackers to obtain signed upload policies and temporary credentials for the site's configured Alibaba Cloud OSS, Tencent Cloud COS and Dogecloud accounts and use them to upload or overwrite files in the site's storage.

 https://db.gcve.eu/vuln/ghsa-cw6m-jprq-gmcm GHSA-cw6m-jprq-gmcm 2026-11-13T10:37:50.233909+00:00

The Mine CloudVod WordPress plugin before 2.6.6 does not restrict who can request cloud storage upload credentials from several of its REST API routes, allowing unauthenticated attackers to obtain signed upload policies and temporary credentials for the site's configured Alibaba Cloud OSS, Tencent Cloud COS and Dogecloud accounts and use them to upload or overwrite files in the site's storage.