https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 19:56:47 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-94244 <p>The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end page, before generating a report containing every customer&#39;s wallet transaction history, allowing any authenticated user, such as a subscriber, to disclose all users&#39; names, email addresses, roles, transaction amounts, payment methods and dates.</p> <p>The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end page, before generating a report containing every customer&#39;s wallet transaction history, allowing any authenticated user, such as a subscriber, to disclose all users&#39; names, email addresses, roles, transaction amounts, payment methods and dates.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-94244 https://vulnerability.circl.lu/vuln/ghsa-44fp-v3g4-crcr <p>The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end page, before generating a report containing every customer&#39;s wallet transaction history, allowing any authenticated user, such as a subscriber, to disclose all users&#39; names, email addresses, roles, transaction amounts, payment methods and dates.</p> <p>The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end page, before generating a report containing every customer&#39;s wallet transaction history, allowing any authenticated user, such as a subscriber, to disclose all users&#39; names, email addresses, roles, transaction amounts, payment methods and dates.</p> https://vulnerability.circl.lu/vuln/ghsa-44fp-v3g4-crcr