https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 11:18:15 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-288424 EUVD-2026-288424 https://cve.radiocsirt.org/vuln/euvd-2026-288424 https://cve.radiocsirt.org/vuln/fkie_cve-2024-12336 <p>The WC Affiliate – A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the &#39;export_all_data&#39; function in all versions up to, and including, 2.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to expose sensitive affiliate data, including personally identifiable information (PII).</p> <p>The WC Affiliate – A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the &#39;export_all_data&#39; function in all versions up to, and including, 2.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to expose sensitive affiliate data, including personally identifiable information (PII).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-12336 https://cve.radiocsirt.org/vuln/ghsa-5jx7-r789-wq9q <p>The WC Affiliate – A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the &#39;export_all_data&#39; function in all versions up to, and including, 2.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to expose sensitive affiliate data, including personally identifiable information (PII).</p> <p>The WC Affiliate – A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the &#39;export_all_data&#39; function in all versions up to, and including, 2.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to expose sensitive affiliate data, including personally identifiable information (PII).</p> https://cve.radiocsirt.org/vuln/ghsa-5jx7-r789-wq9q