Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 07:48:22 +0000 cnvd-2025-23755 https://cve.radiocsirt.org/vuln/cnvd-2025-23755 cnvd-2025-23755 https://cve.radiocsirt.org/vuln/cnvd-2025-23755 EUVD-2026-283168 https://cve.radiocsirt.org/vuln/euvd-2026-283168 EUVD-2026-283168 https://cve.radiocsirt.org/vuln/euvd-2026-283168 fkie_cve-2025-9286 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9286 <p>The Appy Pie Connect for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within the reset_user_password() REST handler in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to to reset the password of arbitrary users, including administrators, thereby gaining administrative access.</p> <p>The Appy Pie Connect for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within the reset_user_password() REST handler in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to to reset the password of arbitrary users, including administrators, thereby gaining administrative access.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-9286 GHSA-5hv2-265f-8mm9 https://cve.radiocsirt.org/vuln/ghsa-5hv2-265f-8mm9 <p>The Appy Pie Connect for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within the reset_user_password() REST handler in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to to reset the password of arbitrary users, including administrators, thereby gaining administrative access.</p> <p>The Appy Pie Connect for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within the reset_user_password() REST handler in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to to reset the password of arbitrary users, including administrators, thereby gaining administrative access.</p> https://cve.radiocsirt.org/vuln/ghsa-5hv2-265f-8mm9