https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-15T22:45:29.585124+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/ghsa-9c3x-hc2h-94xp GHSA-9c3x-hc2h-94xp 2026-11-15T22:45:29.586638+00:00

The Woocommerce Wishlist WordPress plugin through 1.1.0 does not have authorisation and CSRF checks in one of its unauthenticated AJAX actions, allowing unauthenticated users to overwrite any site option with the URL of an uploaded image or an empty value, breaking the site (for example by changing its URL or active , or deactivating every Woocommerce Wishlist WordPress plugin through 1.1.0).