https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:44:46 +0000 https://vulnerability.circl.lu/vuln/cve-2026-8615 <p><strong>Affected:</strong> ghera74 ilGhera Reviso Exporter for WooCommerce</p> <p>The Reviso Exporter for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce verification on the disconnect_callback() function in versions up to, and including, 1.2.3. The function is registered to the &#39;wp_ajax_wcefr-disconnect&#39; AJAX action and unconditionally calls delete_option(&#39;wcefr-agt&#39;), which removes the Reviso Agreement Grant Token used to authenticate API calls. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete the plugin&#39;s stored Agreement Grant Token, breaking the connection between WooCommerce and the Reviso service.</p> <p><strong>Affected:</strong> ghera74 ilGhera Reviso Exporter for WooCommerce</p> <p>The Reviso Exporter for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce verification on the disconnect_callback() function in versions up to, and including, 1.2.3. The function is registered to the &#39;wp_ajax_wcefr-disconnect&#39; AJAX action and unconditionally calls delete_option(&#39;wcefr-agt&#39;), which removes the Reviso Agreement Grant Token used to authenticate API calls. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete the plugin&#39;s stored Agreement Grant Token, breaking the connection between WooCommerce and the Reviso service.</p> https://vulnerability.circl.lu/vuln/cve-2026-8615