https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 02:46:09 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-335215 EUVD-2026-335215 https://cve.radiocsirt.org/vuln/euvd-2026-335215 https://cve.radiocsirt.org/vuln/fkie_cve-2026-7558 <p>The Age Verification &amp; Identity Verification by Token of Trust plugin for WordPress is vulnerable to unauthorized access in all versions up to and including 4.0.2. This is due to the handle_export_table() function being registered on the WordPress &#39;init&#39; hook, which fires for all requests, including those from unauthenticated visitors, without any capability check. This makes it possible for unauthenticated attackers to download a CSV file containing sensitive WooCommerce donation data, including order dates, order IDs, charitable donation amounts, and admin-only order edit URLs, simply by visiting any page on the site with the &#39;tot_export_table&#39; GET parameter set to a numeric value (0–3).</p> <p>The Age Verification &amp; Identity Verification by Token of Trust plugin for WordPress is vulnerable to unauthorized access in all versions up to and including 4.0.2. This is due to the handle_export_table() function being registered on the WordPress &#39;init&#39; hook, which fires for all requests, including those from unauthenticated visitors, without any capability check. This makes it possible for unauthenticated attackers to download a CSV file containing sensitive WooCommerce donation data, including order dates, order IDs, charitable donation amounts, and admin-only order edit URLs, simply by visiting any page on the site with the &#39;tot_export_table&#39; GET parameter set to a numeric value (0–3).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-7558 https://cve.radiocsirt.org/vuln/ghsa-v9rj-7f7r-32jj <p>The Age Verification &amp; Identity Verification by Token of Trust plugin for WordPress is vulnerable to unauthorized access in all versions up to and including 4.0.2. This is due to the handle_export_table() function being registered on the WordPress &#39;init&#39; hook, which fires for all requests, including those from unauthenticated visitors, without any capability check. This makes it possible for unauthenticated attackers to download a CSV file containing sensitive WooCommerce donation data, including order dates, order IDs, charitable donation amounts, and admin-only order edit URLs, simply by visiting any page on the site with the &#39;tot_export_table&#39; GET parameter set to a numeric value (0–3).</p> <p>The Age Verification &amp; Identity Verification by Token of Trust plugin for WordPress is vulnerable to unauthorized access in all versions up to and including 4.0.2. This is due to the handle_export_table() function being registered on the WordPress &#39;init&#39; hook, which fires for all requests, including those from unauthenticated visitors, without any capability check. This makes it possible for unauthenticated attackers to download a CSV file containing sensitive WooCommerce donation data, including order dates, order IDs, charitable donation amounts, and admin-only order edit URLs, simply by visiting any page on the site with the &#39;tot_export_table&#39; GET parameter set to a numeric value (0–3).</p> https://cve.radiocsirt.org/vuln/ghsa-v9rj-7f7r-32jj