https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 21:56:54 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-282290 EUVD-2026-282290 https://cve.radiocsirt.org/vuln/euvd-2026-282290 https://cve.radiocsirt.org/vuln/fkie_cve-2024-12253 <p>The Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the &#39;save_settings&#39;, &#39;export_csv&#39;, and &#39;simpleecommcart-action&#39; actions in all versions up to, and including, 3.1.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to update the plugins settings and retrieve order and log data (which is also accessible to unauthenticated users).</p> <p>The Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the &#39;save_settings&#39;, &#39;export_csv&#39;, and &#39;simpleecommcart-action&#39; actions in all versions up to, and including, 3.1.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to update the plugins settings and retrieve order and log data (which is also accessible to unauthenticated users).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-12253 https://cve.radiocsirt.org/vuln/ghsa-g7pv-5fjq-q2xw <p>The Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the &#39;save_settings&#39;, &#39;export_csv&#39;, and &#39;simpleecommcart-action&#39; actions in all versions up to, and including, 3.1.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to update the plugins settings and retrieve order and log data (which is also accessible to unauthenticated users).</p> <p>The Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the &#39;save_settings&#39;, &#39;export_csv&#39;, and &#39;simpleecommcart-action&#39; actions in all versions up to, and including, 3.1.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to update the plugins settings and retrieve order and log data (which is also accessible to unauthenticated users).</p> https://cve.radiocsirt.org/vuln/ghsa-g7pv-5fjq-q2xw