https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T23:04:07.732730+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-24368 EUVD-2026-24368 2026-10-18T23:04:07.735609+00:00 EUVD-2026-24368 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24993 fkie_cve-2021-24993 2026-10-18T23:04:07.735642+00:00

The Ultimate Product Catalog WordPress plugin before 5.0.26 does not have authorisation and CSRF checks in some AJAX actions, which could allow any authenticated users, such as subscriber to call them and add arbitrary products, or change the plugin's settings for example

 https://cve.radiocsirt.org/vuln/ghsa-m49w-ph7r-f4pq GHSA-m49w-ph7r-f4pq 2026-10-18T23:04:07.735673+00:00

The Ultimate Product Catalog WordPress plugin before 5.0.26 does not have authorisation and CSRF checks in some AJAX actions, which could allow any authenticated users, such as subscriber to call them and add arbitrary products, or change the plugin's settings for example

 https://cve.radiocsirt.org/vuln/gsd-2021-24993 gsd-2021-24993 2026-10-18T23:04:07.735691+00:00 gsd-2021-24993