https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T20:00:51.850886+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-286253 EUVD-2026-286253 2026-10-09T20:00:51.853003+00:00 EUVD-2026-286253 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1671 fkie_cve-2025-1671 2026-10-09T20:00:51.853034+00:00

The Academist Membership plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.6. This is due to the academist_membership_check_facebook_user() function not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as any user, including site administrators.

 https://cve.radiocsirt.org/vuln/ghsa-2m82-vj3v-6q9q GHSA-2m82-vj3v-6q9q 2026-10-09T20:00:51.853066+00:00

The Academist Membership plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.6. This is due to the academist_membership_check_facebook_user() function not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as any user, including site administrators.