https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 20:39:54 +0000 https://cve.radiocsirt.org/vuln/cve-2025-11457 <p><strong>Affected:</strong> EasyCommerce – AI-Powered WordPress Ecommerce Plugin to Sell Digital Products, Subscriptions &amp; Physical Goods</p> <p>The EasyCommerce – AI-Powered, Fast &amp; Beautiful WordPress Ecommerce Plugin plugin for WordPress is vulnerable to Privilege Escalation in versions 0.9.0-beta2 to 1.8.2. This is due to the /easycommerce/v1/orders REST API endpoint not properly restricting the ability for users to select roles during registration. This makes it possible for unauthenticated attackers to gain administrator-level access to a vulnerable site.</p> <p><strong>Affected:</strong> EasyCommerce – AI-Powered WordPress Ecommerce Plugin to Sell Digital Products, Subscriptions &amp; Physical Goods</p> <p>The EasyCommerce – AI-Powered, Fast &amp; Beautiful WordPress Ecommerce Plugin plugin for WordPress is vulnerable to Privilege Escalation in versions 0.9.0-beta2 to 1.8.2. This is due to the /easycommerce/v1/orders REST API endpoint not properly restricting the ability for users to select roles during registration. This makes it possible for unauthenticated attackers to gain administrator-level access to a vulnerable site.</p> https://cve.radiocsirt.org/vuln/cve-2025-11457