https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T19:01:33.367646+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-286309 EUVD-2026-286309 2026-10-09T19:01:33.416768+00:00 EUVD-2026-286309 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0953 fkie_cve-2026-0953 2026-10-09T19:01:33.416807+00:00

The Tutor LMS Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 3.9.5 via the Social Login addon. This is due to the plugin failing to verify that the email provided in the authentication request matches the email from the validated OAuth token. This makes it possible for unauthenticated attackers to log in as any existing user, including administrators, by supplying a valid OAuth token from their own account along with the victim's email address.

 https://cve.radiocsirt.org/vuln/ghsa-46hh-8mqf-62rx GHSA-46hh-8mqf-62rx 2026-10-09T19:01:33.416841+00:00

The Tutor LMS Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 3.9.5 via the Social Login addon. This is due to the plugin failing to verify that the email provided in the authentication request matches the email from the validated OAuth token. This makes it possible for unauthenticated attackers to log in as any existing user, including administrators, by supplying a valid OAuth token from their own account along with the victim's email address.