https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T03:26:29.789059+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-24609 cnvd-2025-24609 2026-10-18T03:26:29.791531+00:00 cnvd-2025-24609 https://cve.radiocsirt.org/vuln/euvd-2026-288054 EUVD-2026-288054 2026-10-18T03:26:29.791563+00:00 EUVD-2026-288054 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11728 fkie_cve-2025-11728 2026-10-18T03:26:29.791577+00:00

The Oceanpayment CreditCard Gateway plugin for WordPress is vulnerable to unauthenticated and unauthorized modification of data due to missing authentication and capability checks on the 'return_payment' and 'notice_payment' functions in all versions up to, and including, 6.0. This makes it possible for unauthenticated attackers to update WooCommerce orders to 'failed' status, and update transaction IDs.

 https://cve.radiocsirt.org/vuln/ghsa-6px9-3vf9-w62q GHSA-6px9-3vf9-w62q 2026-10-18T03:26:29.791607+00:00

The Oceanpayment CreditCard Gateway plugin for WordPress is vulnerable to unauthenticated and unauthorized modification of data due to missing authentication and capability checks on the 'return_payment' and 'notice_payment' functions in all versions up to, and including, 6.0. This makes it possible for unauthenticated attackers to update WooCommerce orders to 'failed' status, and update transaction IDs.