Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 13:47:13 +0000 cnvd-2026-34498 https://cve.radiocsirt.org/vuln/cnvd-2026-34498 cnvd-2026-34498 https://cve.radiocsirt.org/vuln/cnvd-2026-34498 EUVD-2026-351384 https://cve.radiocsirt.org/vuln/euvd-2026-351384 EUVD-2026-351384 https://cve.radiocsirt.org/vuln/euvd-2026-351384 fkie_cve-2026-19073 https://cve.radiocsirt.org/vuln/fkie_cve-2026-19073 <p>The Order Sync with Zendesk for WooCommerce WordPress plugin before 2.2.3 does not perform any capability check on one of its REST API endpoints, and does not verify that the requester owns the account being queried, allowing unauthenticated attackers to retrieve the order history and purchase totals of any customer whose email address they know or can enumerate.</p> <p>The Order Sync with Zendesk for WooCommerce WordPress plugin before 2.2.3 does not perform any capability check on one of its REST API endpoints, and does not verify that the requester owns the account being queried, allowing unauthenticated attackers to retrieve the order history and purchase totals of any customer whose email address they know or can enumerate.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-19073 GHSA-75cj-4j6f-h35h https://cve.radiocsirt.org/vuln/ghsa-75cj-4j6f-h35h <p>The Order Sync with Zendesk for WooCommerce WordPress plugin before 2.2.3 does not perform any capability check on one of its REST API endpoints, and does not verify that the requester owns the account being queried, allowing unauthenticated attackers to retrieve the order history and purchase totals of any customer whose email address they know or can enumerate.</p> <p>The Order Sync with Zendesk for WooCommerce WordPress plugin before 2.2.3 does not perform any capability check on one of its REST API endpoints, and does not verify that the requester owns the account being queried, allowing unauthenticated attackers to retrieve the order history and purchase totals of any customer whose email address they know or can enumerate.</p> https://cve.radiocsirt.org/vuln/ghsa-75cj-4j6f-h35h