Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 00:28:21 +0000 CVE-2026-86785 — Social Commerce for WooCommerce <= 2.5.4 - Unauthenticated Plugin Option and Product Sync Status Update https://vulnerability.circl.lu/vuln/cve-2026-86785 <p><strong>Affected:</strong> Unknown Social Commerce for WooCommerce</p> <p>The Social Commerce for WooCommerce WordPress plugin through 2.5.4 does not have authorisation checks on some of its REST API endpoints, allowing unauthenticated users to update Social Commerce for WooCommerce WordPress plugin through 2.5.4 configuration and product synchronisation state.</p> <p><strong>Affected:</strong> Unknown Social Commerce for WooCommerce</p> <p>The Social Commerce for WooCommerce WordPress plugin through 2.5.4 does not have authorisation checks on some of its REST API endpoints, allowing unauthenticated users to update Social Commerce for WooCommerce WordPress plugin through 2.5.4 configuration and product synchronisation state.</p> https://vulnerability.circl.lu/vuln/cve-2026-86785