https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T07:13:22.424116+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-86785 CVE-2026-86785 — Social Commerce for WooCommerce <= 2.5.4 - Unauthenticated Plugin Option and Product Sync Status Update 2026-10-01T07:13:22.438641+00:00

Affected: Unknown Social Commerce for WooCommerce

The Social Commerce for WooCommerce WordPress plugin through 2.5.4 does not have authorisation checks on some of its REST API endpoints, allowing unauthenticated users to update Social Commerce for WooCommerce WordPress plugin through 2.5.4 configuration and product synchronisation state.