https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-07T11:07:06.811947+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-79627 fkie_cve-2026-79627 2026-11-07T11:07:06.815005+00:00

The Advanced File Manager WordPress plugin before 6.0.0 does not correctly determine whether a stored file is an SVG before sanitising it, allowing users granted file-manager access by an administrator to store a file containing script that is not stripped and that runs in the browser of anyone who opens it, including an administrator.

 https://db.gcve.eu/vuln/ghsa-3846-mpmc-4v59 GHSA-3846-mpmc-4v59 2026-11-07T11:07:06.815083+00:00

The Advanced File Manager WordPress plugin before 6.0.0 does not correctly determine whether a stored file is an SVG before sanitising it, allowing users granted file-manager access by an administrator to store a file containing script that is not stripped and that runs in the browser of anyone who opens it, including an administrator.