https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T06:35:07.559972+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-354349 EUVD-2026-354349 2026-10-12T06:35:07.561729+00:00 EUVD-2026-354349 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13700 fkie_cve-2026-13700 2026-10-12T06:35:07.561756+00:00

The WooMS WordPress plugin through 9.14 does not validate a user-supplied URL before using it in a server-side request and attaches stored third-party integration credentials to every such request, allowing unauthenticated attackers to perform Server-Side Request Forgery and to disclose the configured integration credentials when the relevant data-sync feature is enabled.

 https://cve.radiocsirt.org/vuln/ghsa-3wqr-pcph-pf9p GHSA-3wqr-pcph-pf9p 2026-10-12T06:35:07.561785+00:00

The WooMS WordPress plugin through 9.14 does not validate a user-supplied URL before using it in a server-side request and attaches stored third-party integration credentials to every such request, allowing unauthenticated attackers to perform Server-Side Request Forgery and to disclose the configured integration credentials when the relevant data-sync feature is enabled.