https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:23:57.034989+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-24248 EUVD-2026-24248 2026-10-04T08:23:57.099098+00:00 EUVD-2026-24248 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24843 fkie_cve-2021-24843 2026-10-04T08:23:57.099134+00:00

The SupportCandy WordPress plugin before 2.2.7 does not have CRSF check in its wpsc_tickets AJAX action, which could allow attackers to make a logged in admin call it and delete arbitrary tickets via the set_delete_permanently_bulk_ticket setting_action.

 https://cve.radiocsirt.org/vuln/ghsa-mp5c-f63g-9v5h GHSA-mp5c-f63g-9v5h 2026-10-04T08:23:57.099169+00:00

The SupportCandy WordPress plugin before 2.2.7 does not have CRSF check in its wpsc_tickets AJAX action, which could allow attackers to make a logged in admin call it and delete arbitrary tickets via the set_delete_permanently_bulk_ticket setting_action.

 https://cve.radiocsirt.org/vuln/gsd-2021-24843 gsd-2021-24843 2026-10-04T08:23:57.099185+00:00 gsd-2021-24843