https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T01:50:38.944768+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-84738 fkie_cve-2026-84738 2026-09-30T01:50:38.960591+00:00

The AF Companion WordPress plugin before 2.2.0 does not validate the type of files uploaded through one of its import features, allowing users with a low-privileged store-management role to upload arbitrary files, including PHP ones, leading to Remote Code Execution.

 https://db.gcve.eu/vuln/ghsa-7mpj-9p6h-7gr6 GHSA-7mpj-9p6h-7gr6 2026-09-30T01:50:38.960650+00:00

The AF Companion WordPress plugin before 2.2.0 does not validate the type of files uploaded through one of its import features, allowing users with a low-privileged store-management role to upload arbitrary files, including PHP ones, leading to Remote Code Execution.