https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T17:12:15.748821+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-4357 fkie_cve-2026-4357 2026-09-29T17:12:15.781991+00:00

The Embed HTML5 Game WordPress plugin through 1.3 does not properly restrict who can upload files via the plugin, as well as what can be uploaded, making it possible for unauthenticated attackers to upload PHP backdoors on affected sites.

 https://vulnerability.circl.lu/vuln/ghsa-j479-42pv-8r66 GHSA-j479-42pv-8r66 2026-09-29T17:12:15.782312+00:00

The Embed HTML5 Game WordPress plugin through 1.3 does not properly restrict who can upload files via the plugin, as well as what can be uploaded, making it possible for unauthenticated attackers to upload PHP backdoors on affected sites.