https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:20:57 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-225359 EUVD-2026-225359 https://cve.radiocsirt.org/vuln/euvd-2026-225359 https://cve.radiocsirt.org/vuln/fkie_cve-2024-2322 <p>The WooCommerce Cart Abandonment Recovery WordPress plugin before 1.2.27 does not have CSRF check in its bulk actions, which could allow attackers to make logged in admins delete arbitrary email templates as well as delete and unsubscribe users from abandoned orders via CSRF attacks.</p> <p>The WooCommerce Cart Abandonment Recovery WordPress plugin before 1.2.27 does not have CSRF check in its bulk actions, which could allow attackers to make logged in admins delete arbitrary email templates as well as delete and unsubscribe users from abandoned orders via CSRF attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-2322 https://cve.radiocsirt.org/vuln/ghsa-rfj8-v7wf-3hfc <p>The WooCommerce Cart Abandonment Recovery WordPress plugin before 1.2.27 does not have CSRF check in its bulk actions, which could allow attackers to make logged in admins delete arbitrary email templates as well as delete and unsubscribe users from abandoned orders via CSRF attacks.</p> <p>The WooCommerce Cart Abandonment Recovery WordPress plugin before 1.2.27 does not have CSRF check in its bulk actions, which could allow attackers to make logged in admins delete arbitrary email templates as well as delete and unsubscribe users from abandoned orders via CSRF attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-rfj8-v7wf-3hfc https://cve.radiocsirt.org/vuln/gsd-2024-2322 gsd-2024-2322 https://cve.radiocsirt.org/vuln/gsd-2024-2322