https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T05:55:21.504592+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-36284 CVE-2022-36284 — WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email… 2026-10-06T05:55:21.520819+00:00

Affected: StoreApps Affiliate For WooCommerce (WordPress plugin)

Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress allows an attacker to change the PayPal email. WooCommerce PayPal Payments plugin (free) should be at least installed to get the extra input field on the user profile page.