https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T10:08:10.522715+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-23755 cnvd-2025-23755 2026-10-05T10:08:10.582956+00:00 cnvd-2025-23755 https://cve.radiocsirt.org/vuln/euvd-2026-283168 EUVD-2026-283168 2026-10-05T10:08:10.582999+00:00 EUVD-2026-283168 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9286 fkie_cve-2025-9286 2026-10-05T10:08:10.583014+00:00

The Appy Pie Connect for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within the reset_user_password() REST handler in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to to reset the password of arbitrary users, including administrators, thereby gaining administrative access.

 https://cve.radiocsirt.org/vuln/ghsa-5hv2-265f-8mm9 GHSA-5hv2-265f-8mm9 2026-10-05T10:08:10.583047+00:00

The Appy Pie Connect for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within the reset_user_password() REST handler in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to to reset the password of arbitrary users, including administrators, thereby gaining administrative access.