https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T12:42:58.961392+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-384547 EUVD-2026-384547 2026-10-19T12:42:59.003343+00:00 EUVD-2026-384547 https://cve.radiocsirt.org/vuln/fkie_cve-2026-105190 fkie_cve-2026-105190 2026-10-19T12:42:59.003378+00:00

The Easy Digital Downloads WordPress plugin before 3.7.1 does not consult the site's user registration setting before creating a WordPress account, allowing unauthenticated users to create an account and receive a logged-in session even when registration is disabled. The created account receives the site's default role.

 https://cve.radiocsirt.org/vuln/ghsa-m3v3-5gv6-4gp6 GHSA-m3v3-5gv6-4gp6 2026-10-19T12:42:59.003412+00:00

The Easy Digital Downloads WordPress plugin before 3.7.1 does not consult the site's user registration setting before creating a WordPress account, allowing unauthenticated users to create an account and receive a logged-in session even when registration is disabled. The created account receives the site's default role.