https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T04:23:15.407339+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-104118 CVE-2026-104118 — Razorpay for WooCommerce < 4.8.8 - Unauthenticated Order Shipping Modification via IDOR 2026-10-08T04:23:15.434412+00:00

Affected: Unknown Razorpay for WooCommerce

The Razorpay for WooCommerce WordPress plugin before 4.8.8 does not perform ownership or authorization checks on a REST API route used during checkout, allowing unauthenticated attackers to modify the shipping information stored on arbitrary orders.