https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T16:28:27.777829+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-330992 EUVD-2026-330992 2026-10-17T16:28:27.779926+00:00 EUVD-2026-330992 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3462 fkie_cve-2026-3462 2026-10-17T16:28:27.779977+00:00

The Frisbii Pay plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'upload_csv' and 'process_batch' functions in all versions up to, and including, 1.8.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary CSV data and overwrite WooCommerce payment tokens, postmeta, and order meta records.

 https://cve.radiocsirt.org/vuln/ghsa-mxv8-m55g-xf4p GHSA-mxv8-m55g-xf4p 2026-10-17T16:28:27.780019+00:00

The Frisbii Pay plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'upload_csv' and 'process_batch' functions in all versions up to, and including, 1.8.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary CSV data and overwrite WooCommerce payment tokens, postmeta, and order meta records.