https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:16:32 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-12241 <p>The Advanced Woo Labels – Product Labels &amp; Badges for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to an improperly secure capability check on the &#39;save_meta_boxes&#39; function in all versions up to, and including, 2.51. This makes it possible for authenticated attackers, with Contributor-level access and above, to create AWS labels that are rendered without proper escaping. The vulnerability was partially patched in version 2.46.</p> <p>The Advanced Woo Labels – Product Labels &amp; Badges for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to an improperly secure capability check on the &#39;save_meta_boxes&#39; function in all versions up to, and including, 2.51. This makes it possible for authenticated attackers, with Contributor-level access and above, to create AWS labels that are rendered without proper escaping. The vulnerability was partially patched in version 2.46.</p> https://db.gcve.eu/vuln/fkie_cve-2026-12241 https://db.gcve.eu/vuln/ghsa-4jg7-xq33-668f <p>The Advanced Woo Labels – Product Labels &amp; Badges for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to an improperly secure capability check on the &#39;save_meta_boxes&#39; function in all versions up to, and including, 2.51. This makes it possible for authenticated attackers, with Contributor-level access and above, to create AWS labels that are rendered without proper escaping. The vulnerability was partially patched in version 2.46.</p> <p>The Advanced Woo Labels – Product Labels &amp; Badges for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to an improperly secure capability check on the &#39;save_meta_boxes&#39; function in all versions up to, and including, 2.51. This makes it possible for authenticated attackers, with Contributor-level access and above, to create AWS labels that are rendered without proper escaping. The vulnerability was partially patched in version 2.46.</p> https://db.gcve.eu/vuln/ghsa-4jg7-xq33-668f