https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T10:53:13.847295+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-288106 EUVD-2026-288106 2026-10-18T10:53:13.849832+00:00 EUVD-2026-288106 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4566 fkie_cve-2024-4566 2026-10-18T10:53:13.849880+00:00

The ShopLentor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_dismiss function in all versions up to, and including, 2.8.8. This makes it possible for authenticated attackers, with contributor-level access and above, to set arbitrary WordPress options to "true". NOTE: This vulnerability can be exploited by attackers with subscriber- or customer-level access and above if (1) the WooCommerce plugin is deactivated or (2) access to the default WordPress admin dashboard is explicitly enabled for authenticated users.

 https://cve.radiocsirt.org/vuln/ghsa-vqc4-qhx7-82xg GHSA-vqc4-qhx7-82xg 2026-10-18T10:53:13.849936+00:00

The ShopLentor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_dismiss function in all versions up to, and including, 2.8.8. This makes it possible for authenticated attackers, with contributor-level access and above, to set arbitrary WordPress options to "true". NOTE: This vulnerability can be exploited by attackers with subscriber- or customer-level access and above if (1) the WooCommerce plugin is deactivated or (2) access to the default WordPress admin dashboard is explicitly enabled for authenticated users.