https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:18:02.913548+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-282320 EUVD-2026-282320 2026-10-05T23:18:03.043484+00:00 EUVD-2026-282320 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5704 fkie_cve-2024-5704 2026-10-05T23:18:03.043533+00:00

The XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions (i.e. ffw_insert_new_faq, ffw_hide_discount_notice, ffw_delete_all_faqs, ffw_delete_single_faq, etc...) in all versions up to, and including, 1.7.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to add new and update existing FAQs, FAQ lists, and modify FAQ associations with products.

 https://cve.radiocsirt.org/vuln/ghsa-hhcq-382w-rjg2 GHSA-hhcq-382w-rjg2 2026-10-05T23:18:03.043591+00:00

The XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.6.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to add new and update existing FAQs, FAQ lists, and modify FAQ associations with products.