https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 12:55:27 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-349420 EUVD-2026-349420 https://cve.radiocsirt.org/vuln/euvd-2026-349420 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16039 <p>The MStore API WordPress plugin before 4.21.0 does not restrict its vendor-orders endpoint to the caller&#39;s own orders, allowing any authenticated user, including Subscribers, to read every WooCommerce order in the store together with each customer&#39;s personal information.</p> <p>The MStore API WordPress plugin before 4.21.0 does not restrict its vendor-orders endpoint to the caller&#39;s own orders, allowing any authenticated user, including Subscribers, to read every WooCommerce order in the store together with each customer&#39;s personal information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-16039 https://cve.radiocsirt.org/vuln/ghsa-wgmj-93jg-87w3 <p>The MStore API WordPress plugin before 4.21.0 does not restrict its vendor-orders endpoint to the caller&#39;s own orders, allowing any authenticated user, including Subscribers, to read every WooCommerce order in the store together with each customer&#39;s personal information.</p> <p>The MStore API WordPress plugin before 4.21.0 does not restrict its vendor-orders endpoint to the caller&#39;s own orders, allowing any authenticated user, including Subscribers, to read every WooCommerce order in the store together with each customer&#39;s personal information.</p> https://cve.radiocsirt.org/vuln/ghsa-wgmj-93jg-87w3