https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T12:38:18.189009+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-5324 CVE-2024-5324 — XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update 2026-10-09T12:38:18.204743+00:00

Affected: xootix Waitlist Woocommerce ( Back in stock notifier ), xootix OTP Login & Register Woocommerce, xootix Side Cart Woocommerce | Woocommerce Cart, xootix Login & Register Customizer – Popup | Slider | Inline | WooCommerce, xootix login\/signup_popup

Multiple plugins for WordPress utilizing the XootiX Framework are vulnerable to unauthorized modification of data due to a missing capability check on the 'import_settings' function in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary options on affected sites. This can be used to enable new user registration and set the default role for new users to Administrator.