Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 21:51:57 +0000 CVE-2026-107789 — SmartyParcel < 1.23.4 - Unauthenticated Shipping Label Disclosure via IDOR https://db.gcve.eu/vuln/cve-2026-107789 <p><strong>Affected:</strong> Unknown SmartyParcel</p> <p>The SmartyParcel WordPress plugin before 1.23.4 does not perform authorisation checks when serving shipping label downloads, allowing unauthenticated users to obtain the shipping labels of arbitrary orders, which contain customer names, addresses and phone numbers.</p> <p><strong>Affected:</strong> Unknown SmartyParcel</p> <p>The SmartyParcel WordPress plugin before 1.23.4 does not perform authorisation checks when serving shipping label downloads, allowing unauthenticated users to obtain the shipping labels of arbitrary orders, which contain customer names, addresses and phone numbers.</p> https://db.gcve.eu/vuln/cve-2026-107789