Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 13 Nov 2026 14:25:21 +0000 CVE-2026-124814 — Ultimate Addons for Elementor Forms < 1.0.8 - Unauthenticated Arbitrary File Upload via 'type' Parameter https://db.gcve.eu/vuln/cve-2026-124814 <p><strong>Affected:</strong> Unknown Ultimate Addons for Elementor Forms</p> <p>The Ultimate Addons for Elementor Forms WordPress plugin before 1.0.8 does not properly validate the extension of uploaded files in its bundled file upload field, allowing unauthenticated users to upload arbitrary files such as PHP scripts and achieve remote code execution.</p> <p><strong>Affected:</strong> Unknown Ultimate Addons for Elementor Forms</p> <p>The Ultimate Addons for Elementor Forms WordPress plugin before 1.0.8 does not properly validate the extension of uploaded files in its bundled file upload field, allowing unauthenticated users to upload arbitrary files such as PHP scripts and achieve remote code execution.</p> https://db.gcve.eu/vuln/cve-2026-124814