https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T08:41:23.615139+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-288292 EUVD-2026-288292 2026-10-22T08:41:23.693646+00:00 EUVD-2026-288292 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14357 fkie_cve-2025-14357 2026-10-22T08:41:23.693686+00:00

The Mega Store Woocommerce theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the setup_widgets() function in core/includes/importer/whizzie.php in all versions up to, and including, 5.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create arbitrary pages and modify site settings.

 https://cve.radiocsirt.org/vuln/ghsa-p2g4-fh2q-4cqj GHSA-p2g4-fh2q-4cqj 2026-10-22T08:41:23.693721+00:00

The Mega Store Woocommerce theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the setup_widgets() function in core/includes/importer/whizzie.php in all versions up to, and including, 5.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create arbitrary pages and modify site settings.