https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T15:54:37.840583+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-385320 EUVD-2026-385320 2026-10-10T15:54:37.887990+00:00 EUVD-2026-385320 https://cve.radiocsirt.org/vuln/fkie_cve-2026-107120 fkie_cve-2026-107120 2026-10-10T15:54:37.888060+00:00

The Contest Gallery WordPress plugin before 33.0.1 does not limit the number of attempts against its front-end registration email-verification step, which relies on a short numeric PIN, allowing unauthenticated attackers to brute-force the PIN and create and activate a WordPress account bound to an email address they do not own, gaining an authenticated session.

 https://cve.radiocsirt.org/vuln/ghsa-4prj-22r4-mcwx GHSA-4prj-22r4-mcwx 2026-10-10T15:54:37.888115+00:00

The Contest Gallery WordPress plugin before 33.0.1 does not limit the number of attempts against its front-end registration email-verification step, which relies on a short numeric PIN, allowing unauthenticated attackers to brute-force the PIN and create and activate a WordPress account bound to an email address they do not own, gaining an authenticated session.