https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T17:09:00.357502+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2009-avi-281 certa-2009-avi-281 — Plusieurs vulnérabilités permettant, entre autres, la réalisation d'injection de code indirecte et de contourner la pol… 2026-10-24T17:09:00.360524+00:00 certa-2009-avi-281 https://cve.radiocsirt.org/vuln/euvd-2026-123272 EUVD-2026-123272 2026-10-24T17:09:00.360557+00:00 EUVD-2026-123272 https://cve.radiocsirt.org/vuln/fkie_cve-2009-2336 fkie_cve-2009-2336 2026-10-24T17:09:00.360572+00:00

The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password request depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. NOTE: the vendor reportedly disputes the significance of this issue, indicating that the behavior exists for "user convenience."

 https://cve.radiocsirt.org/vuln/ghsa-4cc8-gf3c-3mrc GHSA-4cc8-gf3c-3mrc 2026-10-24T17:09:00.360600+00:00

The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password request depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. NOTE: the vendor reportedly disputes the significance of this issue, indicating that the behavior exists for "user convenience."

 https://cve.radiocsirt.org/vuln/gsd-2009-2336 gsd-2009-2336 2026-10-24T17:09:00.360617+00:00 gsd-2009-2336