<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 15 Oct 2026 19:53:26 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-7862 — Eupago Gateway For Woocommerce &lt; 4.7.2 - Unauthenticated Arbitrary Refund Initiation</title>
      <link>https://cve.radiocsirt.org/vuln/cve-2026-7862</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Unknown Eupago Gateway For Woocommerce&lt;/p&gt;
&lt;p&gt;The Eupago Gateway For Woocommerce WordPress plugin before 4.7.2 does not properly restrict access to its refund request handler, allowing unauthenticated attackers to initiate refunds against any WooCommerce order using the merchant&amp;#39;s payment gateway credentials, and for applicable payment methods, to redirect refunded funds to an attacker-controlled bank account.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Unknown Eupago Gateway For Woocommerce&lt;/p&gt;
&lt;p&gt;The Eupago Gateway For Woocommerce WordPress plugin before 4.7.2 does not properly restrict access to its refund request handler, allowing unauthenticated attackers to initiate refunds against any WooCommerce order using the merchant&amp;#39;s payment gateway credentials, and for applicable payment methods, to redirect refunded funds to an attacker-controlled bank account.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cve-2026-7862</guid>
    </item>
  </channel>
</rss>
