https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 15 Nov 2026 04:28:05 +0000 https://db.gcve.eu/vuln/cve-2026-118064 <p><strong>Affected:</strong> Unknown Advance Guest Post</p> <p>The Advance Guest Post WordPress plugin through 1.9 does not properly restrict or validate file uploads, authorizing an upload action with a nonce exposed to every front-end visitor and checking only a file&#39;s leading bytes, allowing unauthenticated users to upload arbitrary PHP files and execute code remotely.</p> <p>Successful exploitation additionally requires the target to run PHP 7.x; on PHP 8.0 and later the vulnerable code path raises a fatal error before the file is written.</p> <p><strong>Affected:</strong> Unknown Advance Guest Post</p> <p>The Advance Guest Post WordPress plugin through 1.9 does not properly restrict or validate file uploads, authorizing an upload action with a nonce exposed to every front-end visitor and checking only a file&#39;s leading bytes, allowing unauthenticated users to upload arbitrary PHP files and execute code remotely.</p> <p>Successful exploitation additionally requires the target to run PHP 7.x; on PHP 8.0 and later the vulnerable code path raises a fatal error before the file is written.</p> https://db.gcve.eu/vuln/cve-2026-118064