https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T15:40:59.165589+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-289103 EUVD-2026-289103 2026-10-05T15:40:59.168316+00:00 EUVD-2026-289103 https://cve.radiocsirt.org/vuln/fkie_cve-2024-9989 fkie_cve-2024-9989 2026-10-05T15:40:59.168347+00:00

The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.18. This is due to a limited arbitrary method call to 'crypto_connect_ajax_process::log_in' function in the 'crypto_connect_ajax_process' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username.

 https://cve.radiocsirt.org/vuln/ghsa-hmfh-w3mx-w6j4 GHSA-hmfh-w3mx-w6j4 2026-10-05T15:40:59.168379+00:00

The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.15. This is due a to limited arbitrary method call to 'crypto_connect_ajax_process::log_in' function in the 'crypto_connect_ajax_process' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username.