https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T08:45:42.715599+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-282172 EUVD-2026-282172 2026-10-16T08:45:42.763048+00:00 EUVD-2026-282172 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13343 fkie_cve-2024-13343 2026-10-16T08:45:42.763084+00:00

The WooCommerce Customers Manager plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajax_assign_new_roles() function in all versions up to, and including, 31.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator.

 https://cve.radiocsirt.org/vuln/ghsa-w84c-wxw3-fr2x GHSA-w84c-wxw3-fr2x 2026-10-16T08:45:42.763117+00:00

The WooCommerce Customers Manager plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajax_assign_new_roles() function in all versions up to, and including, 31.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator.