https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T06:50:59.359332+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-25018 CVE-2021-25018 — PPOM for WooCommerce < 24.0 - Subscriber+ Settings Update to Stored XSS 2026-10-27T06:50:59.360482+00:00

Affected: Unknown PPOM for WooCommerce

The PPOM for WooCommerce WordPress plugin before 24.0 does not have authorisation and CSRF checks in the ppom_settings_panel_action AJAX action, allowing any authenticated to call it and set arbitrary settings. Furthermore, due to the lack of sanitisation and escaping, it could lead to Stored XSS issues