https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T09:22:02.848918+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-16419 bdu:2025-16419 2026-10-09T09:22:02.913866+00:00 bdu:2025-16419 https://cve.radiocsirt.org/vuln/cnvd-2025-24611 cnvd-2025-24611 2026-10-09T09:22:02.913905+00:00 cnvd-2025-24611 https://cve.radiocsirt.org/vuln/euvd-2026-287609 EUVD-2026-287609 2026-10-09T09:22:02.913919+00:00 EUVD-2026-287609 https://cve.radiocsirt.org/vuln/fkie_cve-2025-10294 fkie_cve-2025-10294 2026-10-09T09:22:02.913931+00:00

The OwnID Passwordless Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.3.4. This is due to the plugin not properly checking if the ownid_shared_secret value is empty prior to authenticating a user via JWT. This makes it possible for unauthenticated attackers to log in as other users, including administrators, on instances where the plugin has not been fully configured yet.

 https://cve.radiocsirt.org/vuln/ghsa-c566-v3fv-6g65 GHSA-c566-v3fv-6g65 2026-10-09T09:22:02.913961+00:00

The OwnID Passwordless Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.3.4. This is due to the plugin not properly checking if the ownid_shared_secret value is empty prior to authenticating a user via JWT. This makes it possible for unauthenticated attackers to log in as other users, including administrators, on instances where the plugin has not been fully configured yet.