https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T11:44:52.948274+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-238156 EUVD-2026-238156 2026-10-06T11:44:53.004569+00:00 EUVD-2026-238156 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3844 fkie_cve-2025-3844 2026-10-06T11:44:53.004614+00:00

The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to Authentication Bypass in versions 1.9.1 to 7.5.2. This is due to handel_ajax_req() function not having proper restrictions on the change_user_meta functionality that makes it possible to set a OTP code and subsequently log in with that OTP code. This makes it possible for unauthenticated attackers to login as other users on the site, including administrators.

 https://cve.radiocsirt.org/vuln/ghsa-5v6f-j8c4-h52p GHSA-5v6f-j8c4-h52p 2026-10-06T11:44:53.004650+00:00

The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to Authentication Bypass in versions 1.9.1 to 7.5.2. This is due to handel_ajax_req() function not having proper restrictions on the change_user_meta functionality that makes it possible to set a OTP code and subsequently log in with that OTP code. This makes it possible for unauthenticated attackers to login as other users on the site, including administrators.