https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 05:21:33 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-91136 <p>The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the &#39;svg_image&#39; parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint. This is due to the endpoint&#39;s permission callback (SVGAnimatorController::index_permission) returning true unconditionally combined with insufficient validation of the &#39;svg_image&#39; input — sanitize_text_field() and esc_html() do not restrict filesystem paths, the file:// stream wrapper, or arbitrary URLs — before it is passed to file_get_contents() (with a wp_remote_get() fallback) and the raw response body is returned in the JSON &#39;html&#39; field. This makes it possible for unauthenticated attackers to read arbitrary files on the affected site&#39;s server which may make remote code execution possible.</p> <p>The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the &#39;svg_image&#39; parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint. This is due to the endpoint&#39;s permission callback (SVGAnimatorController::index_permission) returning true unconditionally combined with insufficient validation of the &#39;svg_image&#39; input — sanitize_text_field() and esc_html() do not restrict filesystem paths, the file:// stream wrapper, or arbitrary URLs — before it is passed to file_get_contents() (with a wp_remote_get() fallback) and the raw response body is returned in the JSON &#39;html&#39; field. This makes it possible for unauthenticated attackers to read arbitrary files on the affected site&#39;s server which may make remote code execution possible.</p> https://db.gcve.eu/vuln/fkie_cve-2026-91136 https://db.gcve.eu/vuln/ghsa-9676-xmxf-xp84 <p>The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the &#39;svg_image&#39; parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint. This is due to the endpoint&#39;s permission callback (SVGAnimatorController::index_permission) returning true unconditionally combined with insufficient validation of the &#39;svg_image&#39; input — sanitize_text_field() and esc_html() do not restrict filesystem paths, the file:// stream wrapper, or arbitrary URLs — before it is passed to file_get_contents() (with a wp_remote_get() fallback) and the raw response body is returned in the JSON &#39;html&#39; field. This makes it possible for unauthenticated attackers to read arbitrary files on the affected site&#39;s server which may make remote code execution possible.</p> <p>The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the &#39;svg_image&#39; parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint. This is due to the endpoint&#39;s permission callback (SVGAnimatorController::index_permission) returning true unconditionally combined with insufficient validation of the &#39;svg_image&#39; input — sanitize_text_field() and esc_html() do not restrict filesystem paths, the file:// stream wrapper, or arbitrary URLs — before it is passed to file_get_contents() (with a wp_remote_get() fallback) and the raw response body is returned in the JSON &#39;html&#39; field. This makes it possible for unauthenticated attackers to read arbitrary files on the affected site&#39;s server which may make remote code execution possible.</p> https://db.gcve.eu/vuln/ghsa-9676-xmxf-xp84