https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T07:28:05.454257+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-288115 EUVD-2026-288115 2026-10-17T07:28:05.456293+00:00 EUVD-2026-288115 https://cve.radiocsirt.org/vuln/fkie_cve-2024-9189 fkie_cve-2024-9189 2026-10-17T07:28:05.456324+00:00

The EU/UK VAT Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the alg_wc_eu_vat_exempt_vat_from_admin() function in all versions up to, and including, 2.12.12. This makes it possible for unauthenticated attackers to update the VAT status for any order.

 https://cve.radiocsirt.org/vuln/ghsa-r58j-wf5c-jr5h GHSA-r58j-wf5c-jr5h 2026-10-17T07:28:05.456353+00:00

The EU/UK VAT Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the alg_wc_eu_vat_exempt_vat_from_admin() function in all versions up to, and including, 2.12.12. This makes it possible for unauthenticated attackers to update the VAT status for any order.