https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T03:20:04.098356+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-262757 EUVD-2026-262757 2026-10-08T03:20:04.159008+00:00 EUVD-2026-262757 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13390 fkie_cve-2025-13390 2026-10-08T03:20:04.159053+00:00

The WP Directory Kit plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.4 due to incorrect implementation of the authentication algorithm in the "wdk_generate_auto_login_link" function. This is due to the feature using a cryptographically weak token generation mechanism. This makes it possible for unauthenticated attackers to gain administrative access and achieve full site takeover via the auto-login endpoint with a predictable token.

 https://cve.radiocsirt.org/vuln/ghsa-cmp6-j4f4-vm9f GHSA-cmp6-j4f4-vm9f 2026-10-08T03:20:04.159104+00:00

The WP Directory Kit plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.4 due to incorrect implementation of the authentication algorithm in the "wdk_generate_auto_login_link" function. This is due to the feature using a cryptographically weak token generation mechanism. This makes it possible for unauthenticated attackers to gain administrative access and achieve full site takeover via the auto-login endpoint with a predictable token.