https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T04:35:13.214099+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-286047 EUVD-2026-286047 2026-10-05T04:35:13.265129+00:00 EUVD-2026-286047 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5641 fkie_cve-2024-5641 2026-10-05T04:35:13.265167+00:00

The One Click Order Re-Order plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ced_ocor_save_general_setting' function in all versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change the plugin settings, including adding stored cross-site scripting.

 https://cve.radiocsirt.org/vuln/ghsa-2wx3-jm7x-4xg5 GHSA-2wx3-jm7x-4xg5 2026-10-05T04:35:13.265203+00:00

The One Click Order Re-Order plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ced_ocor_save_general_setting' function in all versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change the plugin settings, including adding stored cross-site scripting.