https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:02:33.588375+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-31860 cnvd-2022-31860 2026-10-06T19:02:33.644430+00:00 cnvd-2022-31860 https://cve.radiocsirt.org/vuln/euvd-2026-11277 EUVD-2026-11277 2026-10-06T19:02:33.644471+00:00 EUVD-2026-11277 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0818 fkie_cve-2022-0818 2026-10-06T19:02:33.644486+00:00

The WooCommerce Affiliate Plugin WordPress plugin before 4.16.4.5 does not have authorization and CSRF checks on a specific action handler, as well as does not sanitize its settings, which enables an unauthenticated attacker to inject malicious XSS payloads into the settings page of the plugin.

 https://cve.radiocsirt.org/vuln/ghsa-cmrq-4p99-j6hr GHSA-cmrq-4p99-j6hr 2026-10-06T19:02:33.644518+00:00

The WooCommerce Affiliate Plugin WordPress plugin before 4.16.4.5 does not have authorization and CSRF checks on a specific action handler, as well as does not sanitize its settings, which enables an unauthenticated attacker to inject malicious XSS payloads into the settings page of the plugin.

 https://cve.radiocsirt.org/vuln/gsd-2022-0818 gsd-2022-0818 2026-10-06T19:02:33.644534+00:00 gsd-2022-0818