Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 19:03:24 +0000 EUVD-2026-359936 https://cve.radiocsirt.org/vuln/euvd-2026-359936 EUVD-2026-359936 https://cve.radiocsirt.org/vuln/euvd-2026-359936 fkie_cve-2026-16568 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16568 <p>The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not verify that the requesting user owns the customer profile being queried through one of its REST endpoints, allowing any authenticated user (e.g. a customer/subscriber) to retrieve other users&#39; personal data, including their email address, name, and roles.</p> <p>The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not verify that the requesting user owns the customer profile being queried through one of its REST endpoints, allowing any authenticated user (e.g. a customer/subscriber) to retrieve other users&#39; personal data, including their email address, name, and roles.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-16568 GHSA-rh79-4xm5-pwhf https://cve.radiocsirt.org/vuln/ghsa-rh79-4xm5-pwhf <p>The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not verify that the requesting user owns the customer profile being queried through one of its REST endpoints, allowing any authenticated user (e.g. a customer/subscriber) to retrieve other users&#39; personal data, including their email address, name, and roles.</p> <p>The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not verify that the requesting user owns the customer profile being queried through one of its REST endpoints, allowing any authenticated user (e.g. a customer/subscriber) to retrieve other users&#39; personal data, including their email address, name, and roles.</p> https://cve.radiocsirt.org/vuln/ghsa-rh79-4xm5-pwhf