https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T17:58:00.878981+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-4047 CVE-2022-4047 — Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload 2026-10-06T17:58:00.895716+00:00

Affected: Unknown Return Refund and Exchange For WooCommerce

The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files such as PHP and lead to RCE