<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 11 Nov 2026 23:52:17 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-123699 — Security For WooCommerce &lt;= 1.0.16 - Unauthenticated Forced Plugin, Theme and Core Updates</title>
      <link>https://db.gcve.eu/vuln/cve-2026-123699</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Unknown Security For WooCommerce&lt;/p&gt;
&lt;p&gt;The Security For WooCommerce WordPress plugin through 1.0.16 does not check that the requester is authorised before running bulk Security For WooCommerce WordPress plugin through 1.0.16,  and WordPress core updates, allowing unauthenticated users to force every pending update to be installed on the site.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Unknown Security For WooCommerce&lt;/p&gt;
&lt;p&gt;The Security For WooCommerce WordPress plugin through 1.0.16 does not check that the requester is authorised before running bulk Security For WooCommerce WordPress plugin through 1.0.16,  and WordPress core updates, allowing unauthenticated users to force every pending update to be installed on the site.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-123699</guid>
    </item>
  </channel>
</rss>
