https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T22:54:14.661525+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-228932 EUVD-2026-228932 2026-10-05T22:54:14.664031+00:00 EUVD-2026-228932 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4047 fkie_cve-2022-4047 2026-10-05T22:54:14.664062+00:00

The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files such as PHP and lead to RCE

 https://cve.radiocsirt.org/vuln/ghsa-3j85-6864-55p3 GHSA-3j85-6864-55p3 2026-10-05T22:54:14.664093+00:00

The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files such as PHP and lead to RCE

 https://cve.radiocsirt.org/vuln/gsd-2022-4047 gsd-2022-4047 2026-10-05T22:54:14.664110+00:00 gsd-2022-4047