https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T22:22:30.219227+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-339909 EUVD-2026-339909 2026-10-12T22:22:30.263833+00:00 EUVD-2026-339909 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14291 fkie_cve-2026-14291 2026-10-12T22:22:30.263874+00:00

The security-ninja-premium WordPress plugin before 5.290 does not verify the second authentication factor in one of its two-factor authentication code paths, allowing an unauthenticated attacker who knows a user's password to complete authentication without the one-time code and bypass enforced two-factor authentication for any account, including administrators. The affected two-factor module ships only in the premium build.

 https://cve.radiocsirt.org/vuln/ghsa-8p8v-838m-f36p GHSA-8p8v-838m-f36p 2026-10-12T22:22:30.263922+00:00

The security-ninja-premium WordPress plugin before 5.290 does not verify the second authentication factor in one of its two-factor authentication code paths, allowing an unauthenticated attacker who knows a user's password to complete authentication without the one-time code and bypass enforced two-factor authentication for any account, including administrators. The affected two-factor module ships only in the premium build.