https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T01:13:05.586267+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-12492 CVE-2026-12492 — Happy Coders OTP Login for WooCommerce < 2.8 - Unauthenticated Account Takeover via hcotp_auto_login_user 2026-10-10T01:13:05.604278+00:00

Affected: Unknown Happy Coders OTP Login for WooCommerce

The Happy Coders OTP Login for WooCommerce WordPress plugin before 2.8 does not verify that a one-time password was actually validated before authenticating a user based on a supplied identifier, allowing unauthenticated attackers to log in as any existing user, including administrators, as well as to create new accounts.