https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T06:57:42.724608+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-287296 EUVD-2026-287296 2026-10-18T06:57:42.726595+00:00 EUVD-2026-287296 https://cve.radiocsirt.org/vuln/fkie_cve-2024-11015 fkie_cve-2024-11015 2026-10-18T06:57:42.726625+00:00

The Sign In With Google plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.8.0. This is due to the 'authenticate_user' user function not implementing sufficient null value checks when setting the access token and user information. This makes it possible for unauthenticated attackers to log in as the first user who has signed in using Google OAuth, which could be the site administrator.

 https://cve.radiocsirt.org/vuln/ghsa-jcrg-xwmr-3vgm GHSA-jcrg-xwmr-3vgm 2026-10-18T06:57:42.726657+00:00

The Sign In With Google plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.8.0. This is due to the 'authenticate_user' user function not implementing sufficient null value checks when setting the access token and user information. This makes it possible for unauthenticated attackers to log in as the first user who has signed in using Google OAuth, which could be the site administrator.