https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T16:21:02.667921+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-225359 EUVD-2026-225359 2026-10-04T16:21:02.670534+00:00 EUVD-2026-225359 https://cve.radiocsirt.org/vuln/fkie_cve-2024-2322 fkie_cve-2024-2322 2026-10-04T16:21:02.670567+00:00

The WooCommerce Cart Abandonment Recovery WordPress plugin before 1.2.27 does not have CSRF check in its bulk actions, which could allow attackers to make logged in admins delete arbitrary email templates as well as delete and unsubscribe users from abandoned orders via CSRF attacks.

 https://cve.radiocsirt.org/vuln/ghsa-rfj8-v7wf-3hfc GHSA-rfj8-v7wf-3hfc 2026-10-04T16:21:02.670597+00:00

The WooCommerce Cart Abandonment Recovery WordPress plugin before 1.2.27 does not have CSRF check in its bulk actions, which could allow attackers to make logged in admins delete arbitrary email templates as well as delete and unsubscribe users from abandoned orders via CSRF attacks.

 https://cve.radiocsirt.org/vuln/gsd-2024-2322 gsd-2024-2322 2026-10-04T16:21:02.670613+00:00 gsd-2024-2322