https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T11:02:12.820919+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-282236 EUVD-2026-282236 2026-10-15T11:02:12.823110+00:00 EUVD-2026-282236 https://cve.radiocsirt.org/vuln/fkie_cve-2025-15511 fkie_cve-2025-15511 2026-10-15T11:02:12.823142+00:00

The Rupantorpay plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_webhook() function in all versions up to, and including, 2.0.0. This makes it possible for unauthenticated attackers to modify WooCommerce order statuses by sending crafted requests to the WooCommerce API endpoint.

 https://cve.radiocsirt.org/vuln/ghsa-v47p-p4r6-wcwj GHSA-v47p-p4r6-wcwj 2026-10-15T11:02:12.823173+00:00

The Rupantorpay plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_webhook() function in all versions up to, and including, 2.0.0. This makes it possible for unauthenticated attackers to modify WooCommerce order statuses by sending crafted requests to the WooCommerce API endpoint.