https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:25:49.795011+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-344198 EUVD-2026-344198 2026-10-06T18:25:49.858626+00:00 EUVD-2026-344198 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12586 fkie_cve-2026-12586 2026-10-06T18:25:49.858679+00:00

The Lenxel WP WordPress theme through 1.0.31 does not perform any authorization or ownership check on its password-reset action, validating only a CSRF nonce, allowing unauthenticated attackers to reset the password of any user (including an administrator) and take over the account.

 https://cve.radiocsirt.org/vuln/ghsa-rhj3-v77h-x35q GHSA-rhj3-v77h-x35q 2026-10-06T18:25:49.858734+00:00

The Lenxel WP WordPress theme through 1.0.31 does not perform any authorization or ownership check on its password-reset action, validating only a CSRF nonce, allowing unauthenticated attackers to reset the password of any user (including an administrator) and take over the account.