https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T18:17:23.630214+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-282290 EUVD-2026-282290 2026-10-15T18:17:23.679218+00:00 EUVD-2026-282290 https://cve.radiocsirt.org/vuln/fkie_cve-2024-12253 fkie_cve-2024-12253 2026-10-15T18:17:23.679262+00:00

The Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'save_settings', 'export_csv', and 'simpleecommcart-action' actions in all versions up to, and including, 3.1.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to update the plugins settings and retrieve order and log data (which is also accessible to unauthenticated users).

 https://cve.radiocsirt.org/vuln/ghsa-g7pv-5fjq-q2xw GHSA-g7pv-5fjq-q2xw 2026-10-15T18:17:23.679300+00:00

The Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'save_settings', 'export_csv', and 'simpleecommcart-action' actions in all versions up to, and including, 3.1.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to update the plugins settings and retrieve order and log data (which is also accessible to unauthenticated users).