Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 00:23:39 +0000 EUVD-2026-349005 https://cve.radiocsirt.org/vuln/euvd-2026-349005 EUVD-2026-349005 https://cve.radiocsirt.org/vuln/euvd-2026-349005 fkie_cve-2026-16981 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16981 <p>The DHL Shipping Germany for WooCommerce WordPress plugin before 4.0.1 does not perform any authorization check (no capability, nonce, login, or ownership check) on one of its shipping-label download endpoints, so an unauthenticated attacker can enumerate sequential ids and download every stored shipping label, each containing the customer&#39;s full name, complete postal address, and order reference.</p> <p>The DHL Shipping Germany for WooCommerce WordPress plugin before 4.0.1 does not perform any authorization check (no capability, nonce, login, or ownership check) on one of its shipping-label download endpoints, so an unauthenticated attacker can enumerate sequential ids and download every stored shipping label, each containing the customer&#39;s full name, complete postal address, and order reference.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-16981 GHSA-xqqx-fcgc-wmxp https://cve.radiocsirt.org/vuln/ghsa-xqqx-fcgc-wmxp <p>The DHL Shipping Germany for WooCommerce WordPress plugin before 4.0.1 does not perform any authorization check (no capability, nonce, login, or ownership check) on one of its shipping-label download endpoints, so an unauthenticated attacker can enumerate sequential ids and download every stored shipping label, each containing the customer&#39;s full name, complete postal address, and order reference.</p> <p>The DHL Shipping Germany for WooCommerce WordPress plugin before 4.0.1 does not perform any authorization check (no capability, nonce, login, or ownership check) on one of its shipping-label download endpoints, so an unauthenticated attacker can enumerate sequential ids and download every stored shipping label, each containing the customer&#39;s full name, complete postal address, and order reference.</p> https://cve.radiocsirt.org/vuln/ghsa-xqqx-fcgc-wmxp