https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:19:34.823104+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-29959 cnvd-2025-29959 2026-10-07T02:19:34.873868+00:00 cnvd-2025-29959 https://cve.radiocsirt.org/vuln/euvd-2026-289605 EUVD-2026-289605 2026-10-07T02:19:34.873907+00:00 EUVD-2026-289605 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12634 fkie_cve-2025-12634 2026-10-07T02:19:34.873921+00:00

The Refund Request for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_refund_status' function in all versions up to, and including, 1.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update refund statuses to approved or rejected.

 https://cve.radiocsirt.org/vuln/ghsa-v84f-5mrr-763p GHSA-v84f-5mrr-763p 2026-10-07T02:19:34.873953+00:00

The Refund Request for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_refund_status' function in all versions up to, and including, 1.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update refund statuses to approved or rejected.