https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T23:00:44.859050+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-264869 EUVD-2026-264869 2026-10-15T23:00:44.861202+00:00 EUVD-2026-264869 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13820 fkie_cve-2025-13820 2026-10-15T23:00:44.861230+00:00

The Comments WordPress plugin before 7.6.40 does not properly validate user's identity when using the disqus.com provider, allowing an attacker to log in to any user (when knowing their email address) when such user does not have an account on disqus.com yet.

 https://cve.radiocsirt.org/vuln/ghsa-77g2-3gj2-8h4q GHSA-77g2-3gj2-8h4q 2026-10-15T23:00:44.861305+00:00

The Comments WordPress plugin before 7.6.40 does not properly validate user's identity when using the disqus.com provider, allowing an attacker to log in to any user (when knowing their email address) when such user does not have an account on disqus.com yet.