https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T17:50:47.927035+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-101686 cnvd-2021-101686 2026-10-16T17:50:47.930167+00:00 cnvd-2021-101686 https://cve.radiocsirt.org/vuln/euvd-2026-217571 EUVD-2026-217571 2026-10-16T17:50:47.930198+00:00 EUVD-2026-217571 https://cve.radiocsirt.org/vuln/fkie_cve-2021-42367 fkie_cve-2021-42367 2026-10-16T17:50:47.930212+00:00

The Variation Swatches for WooCommerce WordPress plugin is vulnerable to Stored Cross-Site Scripting via several parameters found in the ~/includes/class-menu-page.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.1.1. Due to missing authorization checks on the tawcvs_save_settings function, low-level authenticated users such as subscribers can exploit this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-6ffh-2qg3-m72q GHSA-6ffh-2qg3-m72q 2026-10-16T17:50:47.930240+00:00

The Variation Swatches for WooCommerce WordPress plugin is vulnerable to Stored Cross-Site Scripting via several parameters found in the ~/includes/class-menu-page.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.1.1. Due to missing authorization checks on the tawcvs_save_settings function, low-level authenticated users such as subscribers can exploit this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2021-42367 gsd-2021-42367 2026-10-16T17:50:47.930256+00:00 gsd-2021-42367