https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:34:28.610724+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-284939 EUVD-2026-284939 2026-10-04T14:34:28.613755+00:00 EUVD-2026-284939 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4186 fkie_cve-2024-4186 2026-10-04T14:34:28.613785+00:00

The Edwiser Bridge plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.0.5. This is due to the 'eb_user_email_verification_key' default value is empty, and the not empty check is missing in the 'eb_user_email_verify' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the user id. This can only be exploited if the 'Email Verification' setting is enabled.

 https://cve.radiocsirt.org/vuln/ghsa-mr2f-mm92-fppw GHSA-mr2f-mm92-fppw 2026-10-04T14:34:28.613819+00:00

The Build App Online plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.0.5. This is due to the 'eb_user_email_verification_key' default value is empty, and the not empty check is missing in the 'eb_user_email_verify' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the user id. This can only be exploited if the 'Email Verification' setting is enabled.

 https://cve.radiocsirt.org/vuln/gsd-2024-4186 gsd-2024-4186 2026-10-04T14:34:28.613839+00:00 gsd-2024-4186