https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 22:24:52 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-367080 EUVD-2026-367080 https://cve.radiocsirt.org/vuln/euvd-2026-367080 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8615 <p>The Reviso Exporter for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce verification on the disconnect_callback() function in versions up to, and including, 1.2.3. The function is registered to the &#39;wp_ajax_wcefr-disconnect&#39; AJAX action and unconditionally calls delete_option(&#39;wcefr-agt&#39;), which removes the Reviso Agreement Grant Token used to authenticate API calls. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete the plugin&#39;s stored Agreement Grant Token, breaking the connection between WooCommerce and the Reviso service.</p> <p>The Reviso Exporter for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce verification on the disconnect_callback() function in versions up to, and including, 1.2.3. The function is registered to the &#39;wp_ajax_wcefr-disconnect&#39; AJAX action and unconditionally calls delete_option(&#39;wcefr-agt&#39;), which removes the Reviso Agreement Grant Token used to authenticate API calls. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete the plugin&#39;s stored Agreement Grant Token, breaking the connection between WooCommerce and the Reviso service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-8615 https://cve.radiocsirt.org/vuln/ghsa-8699-m8pv-8mxw <p>The Reviso Exporter for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce verification on the disconnect_callback() function in versions up to, and including, 1.2.3. The function is registered to the &#39;wp_ajax_wcefr-disconnect&#39; AJAX action and unconditionally calls delete_option(&#39;wcefr-agt&#39;), which removes the Reviso Agreement Grant Token used to authenticate API calls. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete the plugin&#39;s stored Agreement Grant Token, breaking the connection between WooCommerce and the Reviso service.</p> <p>The Reviso Exporter for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce verification on the disconnect_callback() function in versions up to, and including, 1.2.3. The function is registered to the &#39;wp_ajax_wcefr-disconnect&#39; AJAX action and unconditionally calls delete_option(&#39;wcefr-agt&#39;), which removes the Reviso Agreement Grant Token used to authenticate API calls. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete the plugin&#39;s stored Agreement Grant Token, breaking the connection between WooCommerce and the Reviso service.</p> https://cve.radiocsirt.org/vuln/ghsa-8699-m8pv-8mxw