https://vulnerability.circl.lu/sightings/feed 2026-10-09T23:39:25.414935+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/371f6073-4dbe-4343-b203-189c1dbf6dbf/export 2026-10-09T23:39:25.432838+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "371f6073-4dbe-4343-b203-189c1dbf6dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104118", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwzzdfei3q2w", "content": "CVE-2026-104118: The Razorpay for WooCommerce WordPress plugin before 4.8.8 lacks authorization checks on a checkout REST API route, letting unauthenticated attackers change shipping details on arbitrary orders. Update to 4.8.8. No exploitation confirmed.", "creation_timestamp": "2026-10-04T08:48:03.564237Z"} 2026-10-04T08:48:03.564237+00:00