https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:37:09.557559+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-24215 EUVD-2026-24215 2026-10-03T21:37:09.632749+00:00 EUVD-2026-24215 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24839 fkie_cve-2021-24839 2026-10-03T21:37:09.632787+00:00

The SupportCandy WordPress plugin before 2.2.5 does not have authorisation and CSRF checks in its wpsc_tickets AJAX action, which could allow unauthenticated users to call it and delete arbitrary tickets via the set_delete_permanently_bulk_ticket setting_action. Other actions may be affected as well.

 https://cve.radiocsirt.org/vuln/ghsa-q2j9-7728-x3pg GHSA-q2j9-7728-x3pg 2026-10-03T21:37:09.632820+00:00

The SupportCandy WordPress plugin before 2.2.5 does not have authorisation and CRSF checks in its wpsc_tickets AJAX action, which could allow unauthenticated users to call it and delete arbitrary tickets via the set_delete_permanently_bulk_ticket setting_action. Other actions may be affected as well.

 https://cve.radiocsirt.org/vuln/gsd-2021-24839 gsd-2021-24839 2026-10-03T21:37:09.632838+00:00 gsd-2021-24839