https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T23:26:49.916164+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24993 CVE-2021-24993 — Ultimate Product Catalog < 5.0.26 - Subscriber+ Arbitrary Product Creation & Settings Update 2026-10-18T23:26:49.917832+00:00

Affected: Unknown Ultimate Product Catalog – WordPress Catalog Plugin

The Ultimate Product Catalog WordPress plugin before 5.0.26 does not have authorisation and CSRF checks in some AJAX actions, which could allow any authenticated users, such as subscriber to call them and add arbitrary products, or change the plugin's settings for example