https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 22:10:00 +0000 https://cve.radiocsirt.org/vuln/cve-2018-8710 <p>A remote code execution issue was discovered in the WooCommerce Products Filter (aka WOOF) plugin before 2.2.0 for WordPress, as demonstrated by the shortcode parameter in a woof_redraw_woof action. The plugin implemented a page redraw AJAX function accessible to anyone without any authentication. WordPress shortcode markup in the &#34;shortcode&#34; parameters would be evaluated. Normally unauthenticated users can&#39;t evaluate shortcodes as they are often sensitive.</p> <p>A remote code execution issue was discovered in the WooCommerce Products Filter (aka WOOF) plugin before 2.2.0 for WordPress, as demonstrated by the shortcode parameter in a woof_redraw_woof action. The plugin implemented a page redraw AJAX function accessible to anyone without any authentication. WordPress shortcode markup in the &#34;shortcode&#34; parameters would be evaluated. Normally unauthenticated users can&#39;t evaluate shortcodes as they are often sensitive.</p> https://cve.radiocsirt.org/vuln/cve-2018-8710