https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T14:52:30.263671+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-29301 cnvd-2025-29301 2026-10-10T14:52:30.266460+00:00 cnvd-2025-29301 https://cve.radiocsirt.org/vuln/euvd-2026-282309 EUVD-2026-282309 2026-10-10T14:52:30.266498+00:00 EUVD-2026-282309 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12955 fkie_cve-2025-12955 2026-10-10T14:52:30.266512+00:00

The Live sales notification for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.3.39. This is due to the "getOrders" function lacking proper authorization and capability checks when the plugin is configured to display recent order information. This makes it possible for unauthenticated attackers to extract sensitive customer information including buyer first names, city, state, country, purchase time and date, and product details.

 https://cve.radiocsirt.org/vuln/ghsa-5f3g-c8jf-rw88 GHSA-5f3g-c8jf-rw88 2026-10-10T14:52:30.266543+00:00

The Live sales notification for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.3.39. This is due to the "getOrders" function lacking proper authorization and capability checks when the plugin is configured to display recent order information. This makes it possible for unauthenticated attackers to extract sensitive customer information including buyer first names, city, state, country, purchase time and date, and product details.