Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 05:20:39 +0000 CVE-2021-25018 — PPOM for WooCommerce < 24.0 - Subscriber+ Settings Update to Stored XSS https://cve.radiocsirt.org/vuln/cve-2021-25018 <p><strong>Affected:</strong> Unknown PPOM for WooCommerce</p> <p>The PPOM for WooCommerce WordPress plugin before 24.0 does not have authorisation and CSRF checks in the ppom_settings_panel_action AJAX action, allowing any authenticated to call it and set arbitrary settings. Furthermore, due to the lack of sanitisation and escaping, it could lead to Stored XSS issues</p> <p><strong>Affected:</strong> Unknown PPOM for WooCommerce</p> <p>The PPOM for WooCommerce WordPress plugin before 24.0 does not have authorisation and CSRF checks in the ppom_settings_panel_action AJAX action, allowing any authenticated to call it and set arbitrary settings. Furthermore, due to the lack of sanitisation and escaping, it could lead to Stored XSS issues</p> https://cve.radiocsirt.org/vuln/cve-2021-25018