https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 12:57:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-385318 EUVD-2026-385318 https://cve.radiocsirt.org/vuln/euvd-2026-385318 https://cve.radiocsirt.org/vuln/fkie_cve-2026-105990 <p>The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form submissions, allowing unauthenticated attackers to download the personal data (name, email, telephone, postal address, message) and payment metadata of everyone who submitted a payment form.</p> <p>The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form submissions, allowing unauthenticated attackers to download the personal data (name, email, telephone, postal address, message) and payment metadata of everyone who submitted a payment form.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-105990 https://cve.radiocsirt.org/vuln/ghsa-gg38-hc35-5qm5 <p>The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form submissions, allowing unauthenticated attackers to download the personal data (name, email, telephone, postal address, message) and payment metadata of everyone who submitted a payment form.</p> <p>The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form submissions, allowing unauthenticated attackers to download the personal data (name, email, telephone, postal address, message) and payment metadata of everyone who submitted a payment form.</p> https://cve.radiocsirt.org/vuln/ghsa-gg38-hc35-5qm5