https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 02:42:12 +0000 https://cve.radiocsirt.org/vuln/cve-2024-5324 <p><strong>Affected:</strong> xootix Waitlist Woocommerce ( Back in stock notifier ), xootix OTP Login &amp; Register Woocommerce, xootix Side Cart Woocommerce | Woocommerce Cart, xootix Login &amp; Register Customizer – Popup | Slider | Inline | WooCommerce, xootix login\/signup_popup</p> <p>Multiple plugins for WordPress utilizing the XootiX Framework are vulnerable to unauthorized modification of data due to a missing capability check on the &#39;import_settings&#39; function in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary options on affected sites. This can be used to enable new user registration and set the default role for new users to Administrator.</p> <p><strong>Affected:</strong> xootix Waitlist Woocommerce ( Back in stock notifier ), xootix OTP Login &amp; Register Woocommerce, xootix Side Cart Woocommerce | Woocommerce Cart, xootix Login &amp; Register Customizer – Popup | Slider | Inline | WooCommerce, xootix login\/signup_popup</p> <p>Multiple plugins for WordPress utilizing the XootiX Framework are vulnerable to unauthorized modification of data due to a missing capability check on the &#39;import_settings&#39; function in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary options on affected sites. This can be used to enable new user registration and set the default role for new users to Administrator.</p> https://cve.radiocsirt.org/vuln/cve-2024-5324