https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 22:21:03 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-24368 EUVD-2026-24368 https://cve.radiocsirt.org/vuln/euvd-2026-24368 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24993 <p>The Ultimate Product Catalog WordPress plugin before 5.0.26 does not have authorisation and CSRF checks in some AJAX actions, which could allow any authenticated users, such as subscriber to call them and add arbitrary products, or change the plugin&#39;s settings for example</p> <p>The Ultimate Product Catalog WordPress plugin before 5.0.26 does not have authorisation and CSRF checks in some AJAX actions, which could allow any authenticated users, such as subscriber to call them and add arbitrary products, or change the plugin&#39;s settings for example</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24993 https://cve.radiocsirt.org/vuln/ghsa-m49w-ph7r-f4pq <p>The Ultimate Product Catalog WordPress plugin before 5.0.26 does not have authorisation and CSRF checks in some AJAX actions, which could allow any authenticated users, such as subscriber to call them and add arbitrary products, or change the plugin&#39;s settings for example</p> <p>The Ultimate Product Catalog WordPress plugin before 5.0.26 does not have authorisation and CSRF checks in some AJAX actions, which could allow any authenticated users, such as subscriber to call them and add arbitrary products, or change the plugin&#39;s settings for example</p> https://cve.radiocsirt.org/vuln/ghsa-m49w-ph7r-f4pq https://cve.radiocsirt.org/vuln/gsd-2021-24993 gsd-2021-24993 https://cve.radiocsirt.org/vuln/gsd-2021-24993