Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 14:06:51 +0000 CVE-2026-87831 — Checkout Field Manager < 7.9.7 - Subscriber+ Arbitrary Attachment Deletion via Customer Address Custom Field https://vulnerability.circl.lu/vuln/cve-2026-87831 <p><strong>Affected:</strong> Unknown Checkout Field Manager (Checkout Manager) for WooCommerce</p> <p>The Checkout Field Manager (Checkout Manager) for WooCommerce WordPress plugin before 7.9.7 does not properly validate the ownership of an attachment before deleting it, allowing any authenticated user such as a customer to delete arbitrary media attachments belonging to other users.</p> <p><strong>Affected:</strong> Unknown Checkout Field Manager (Checkout Manager) for WooCommerce</p> <p>The Checkout Field Manager (Checkout Manager) for WooCommerce WordPress plugin before 7.9.7 does not properly validate the ownership of an attachment before deleting it, allowing any authenticated user such as a customer to delete arbitrary media attachments belonging to other users.</p> https://vulnerability.circl.lu/vuln/cve-2026-87831