https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:24:23.038175+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-54338 cnvd-2022-54338 2026-10-03T14:24:23.109242+00:00 cnvd-2022-54338 https://cve.radiocsirt.org/vuln/euvd-2026-12053 EUVD-2026-12053 2026-10-03T14:24:23.109282+00:00 EUVD-2026-12053 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1903 fkie_cve-2022-1903 2026-10-03T14:24:23.109297+00:00

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username

 https://cve.radiocsirt.org/vuln/ghsa-84p8-fx26-f9cw GHSA-84p8-fx26-f9cw 2026-10-03T14:24:23.109328+00:00

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username

 https://cve.radiocsirt.org/vuln/gsd-2022-1903 gsd-2022-1903 2026-10-03T14:24:23.109344+00:00 gsd-2022-1903