https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 21:16:14 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-07768 cnvd-2018-07768 https://cve.radiocsirt.org/vuln/cnvd-2018-07768 https://cve.radiocsirt.org/vuln/euvd-2026-163955 EUVD-2026-163955 https://cve.radiocsirt.org/vuln/euvd-2026-163955 https://cve.radiocsirt.org/vuln/fkie_cve-2018-8710 <p>A remote code execution issue was discovered in the WooCommerce Products Filter (aka WOOF) plugin before 2.2.0 for WordPress, as demonstrated by the shortcode parameter in a woof_redraw_woof action. The plugin implemented a page redraw AJAX function accessible to anyone without any authentication. WordPress shortcode markup in the &#34;shortcode&#34; parameters would be evaluated. Normally unauthenticated users can&#39;t evaluate shortcodes as they are often sensitive.</p> <p>A remote code execution issue was discovered in the WooCommerce Products Filter (aka WOOF) plugin before 2.2.0 for WordPress, as demonstrated by the shortcode parameter in a woof_redraw_woof action. The plugin implemented a page redraw AJAX function accessible to anyone without any authentication. WordPress shortcode markup in the &#34;shortcode&#34; parameters would be evaluated. Normally unauthenticated users can&#39;t evaluate shortcodes as they are often sensitive.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-8710 https://cve.radiocsirt.org/vuln/ghsa-mvhg-g9jx-74w2 <p>A remote code execution issue was discovered in the WooCommerce Products Filter (aka WOOF) plugin before 2.2.0 for WordPress, as demonstrated by the shortcode parameter in a woof_redraw_woof action. The plugin implemented a page redraw AJAX function accessible to anyone without any authentication. WordPress shortcode markup in the &#34;shortcode&#34; parameters would be evaluated. Normally unauthenticated users can&#39;t evaluate shortcodes as they are often sensitive.</p> <p>A remote code execution issue was discovered in the WooCommerce Products Filter (aka WOOF) plugin before 2.2.0 for WordPress, as demonstrated by the shortcode parameter in a woof_redraw_woof action. The plugin implemented a page redraw AJAX function accessible to anyone without any authentication. WordPress shortcode markup in the &#34;shortcode&#34; parameters would be evaluated. Normally unauthenticated users can&#39;t evaluate shortcodes as they are often sensitive.</p> https://cve.radiocsirt.org/vuln/ghsa-mvhg-g9jx-74w2 https://cve.radiocsirt.org/vuln/gsd-2018-8710 gsd-2018-8710 https://cve.radiocsirt.org/vuln/gsd-2018-8710