Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 15 Nov 2026 22:51:58 +0000 CVE-2026-124763 — AM Wishlist <= 1.1.0 - Unauthenticated Option Overwrite via amwl_upload_file https://db.gcve.eu/vuln/cve-2026-124763 <p><strong>Affected:</strong> Unknown Woocommerce Wishlist</p> <p>The Woocommerce Wishlist WordPress plugin through 1.1.0 does not have authorisation and CSRF checks in one of its unauthenticated AJAX actions, allowing unauthenticated users to overwrite any site option with the URL of an uploaded image or an empty value, breaking the site (for example by changing its URL or active , or deactivating every Woocommerce Wishlist WordPress plugin through 1.1.0).</p> <p><strong>Affected:</strong> Unknown Woocommerce Wishlist</p> <p>The Woocommerce Wishlist WordPress plugin through 1.1.0 does not have authorisation and CSRF checks in one of its unauthenticated AJAX actions, allowing unauthenticated users to overwrite any site option with the URL of an uploaded image or an empty value, breaking the site (for example by changing its URL or active , or deactivating every Woocommerce Wishlist WordPress plugin through 1.1.0).</p> https://db.gcve.eu/vuln/cve-2026-124763