https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T08:54:23.998734+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-3537 CVE-2022-3537 — Role Based Pricing for WooCommerce < 1.6.2 - Subscriber+ Arbitrary File Upload 2026-10-05T08:54:24.016243+00:00

Affected: Unknown Role Based Pricing for WooCommerce

The Role Based Pricing for WooCommerce WordPress plugin before 1.6.2 does not have authorisation and proper CSRF checks, and does not validate files to be uploaded, allowing any authenticated users like subscriber to upload arbitrary files, such as PHP