https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T08:42:48.153268+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-289568 EUVD-2026-289568 2026-10-17T08:42:48.201308+00:00 EUVD-2026-289568 https://cve.radiocsirt.org/vuln/fkie_cve-2024-9863 fkie_cve-2024-9863 2026-10-17T08:42:48.201355+00:00

The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 3.6.0 due to the insecure 'administrator' default value for the 'default_user_role' option. This makes it possible for unauthenticated attackers to register an administrator user even if the registration form is disabled.

 https://cve.radiocsirt.org/vuln/ghsa-cc3h-2hrf-w63x GHSA-cc3h-2hrf-w63x 2026-10-17T08:42:48.201405+00:00

The UserPro plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 3.6.0 due to the insecure 'administrator' default value for the 'default_user_role' option. This makes it possible for unauthenticated attackers to register an administrator user even if the registration form is disabled.