https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T08:16:46.555857+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-278681 EUVD-2026-278681 2026-10-15T08:16:46.557960+00:00 EUVD-2026-278681 https://cve.radiocsirt.org/vuln/fkie_cve-2026-2418 fkie_cve-2026-2418 2026-10-15T08:16:46.558007+00:00

The Login with Salesforce WordPress plugin through 1.0.2 does not validate that users are allowed to login through Salesforce, allowing unauthenticated users to be authenticated as any user (such as admin) by simply knowing the email

 https://cve.radiocsirt.org/vuln/ghsa-22f9-qcfx-q3w3 GHSA-22f9-qcfx-q3w3 2026-10-15T08:16:46.558059+00:00

The Login with Salesforce WordPress plugin through 1.0.2 does not validate that users are allowed to login through Salesforce, allowing unauthenticated users to be authenticated as any user (such as admin) by simply knowing the email