Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 14:37:46 +0000 CVE-2022-3537 — Role Based Pricing for WooCommerce < 1.6.2 - Subscriber+ Arbitrary File Upload https://cve.radiocsirt.org/vuln/cve-2022-3537 <p><strong>Affected:</strong> Unknown Role Based Pricing for WooCommerce</p> <p>The Role Based Pricing for WooCommerce WordPress plugin before 1.6.2 does not have authorisation and proper CSRF checks, and does not validate files to be uploaded, allowing any authenticated users like subscriber to upload arbitrary files, such as PHP</p> <p><strong>Affected:</strong> Unknown Role Based Pricing for WooCommerce</p> <p>The Role Based Pricing for WooCommerce WordPress plugin before 1.6.2 does not have authorisation and proper CSRF checks, and does not validate files to be uploaded, allowing any authenticated users like subscriber to upload arbitrary files, such as PHP</p> https://cve.radiocsirt.org/vuln/cve-2022-3537