https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-22T22:57:09.477917+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-107788 fkie_cve-2026-107788 2026-10-22T22:57:09.498645+00:00

The SmartyParcel WordPress plugin before 1.23.4 does not perform authorisation checks when deleting shipping label records, allowing any authenticated user such as a subscriber to delete the shipping label and tracking records of arbitrary orders store-wide.

 https://db.gcve.eu/vuln/ghsa-f3mr-85qm-w65x GHSA-f3mr-85qm-w65x 2026-10-22T22:57:09.498845+00:00

The SmartyParcel WordPress plugin before 1.23.4 does not perform authorisation checks when deleting shipping label records, allowing any authenticated user such as a subscriber to delete the shipping label and tracking records of arbitrary orders store-wide.