https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T22:06:42.840358+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-285650 EUVD-2026-285650 2026-10-15T22:06:42.842815+00:00 EUVD-2026-285650 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11457 fkie_cve-2025-11457 2026-10-15T22:06:42.842851+00:00

The EasyCommerce – AI-Powered, Fast & Beautiful WordPress Ecommerce Plugin plugin for WordPress is vulnerable to Privilege Escalation in versions 0.9.0-beta2 to 1.8.2. This is due to the /easycommerce/v1/orders REST API endpoint not properly restricting the ability for users to select roles during registration. This makes it possible for unauthenticated attackers to gain administrator-level access to a vulnerable site.

 https://cve.radiocsirt.org/vuln/ghsa-34q8-j2ch-pp33 GHSA-34q8-j2ch-pp33 2026-10-15T22:06:42.842888+00:00

The EasyCommerce – AI-Powered, Fast & Beautiful WordPress Ecommerce Plugin plugin for WordPress is vulnerable to Privilege Escalation in versions 0.9.0-beta2 to 1.5.0. This is due to the /easycommerce/v1/orders REST API endpoint not properly restricting the ability for users to select roles during registration. This makes it possible for unauthenticated attackers to gain administrator-level access to a vulnerable site.