https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T13:47:25.797381+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-34498 cnvd-2026-34498 2026-10-09T13:47:25.800100+00:00 cnvd-2026-34498 https://cve.radiocsirt.org/vuln/euvd-2026-351384 EUVD-2026-351384 2026-10-09T13:47:25.800134+00:00 EUVD-2026-351384 https://cve.radiocsirt.org/vuln/fkie_cve-2026-19073 fkie_cve-2026-19073 2026-10-09T13:47:25.800148+00:00

The Order Sync with Zendesk for WooCommerce WordPress plugin before 2.2.3 does not perform any capability check on one of its REST API endpoints, and does not verify that the requester owns the account being queried, allowing unauthenticated attackers to retrieve the order history and purchase totals of any customer whose email address they know or can enumerate.

 https://cve.radiocsirt.org/vuln/ghsa-75cj-4j6f-h35h GHSA-75cj-4j6f-h35h 2026-10-09T13:47:25.800175+00:00

The Order Sync with Zendesk for WooCommerce WordPress plugin before 2.2.3 does not perform any capability check on one of its REST API endpoints, and does not verify that the requester owns the account being queried, allowing unauthenticated attackers to retrieve the order history and purchase totals of any customer whose email address they know or can enumerate.