https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T01:48:47.919063+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-15930 CVE-2026-15930 — Simple Membership < 4.7.8 - Unauthenticated Administrator Account Takeover via Registration Username Collision 2026-10-07T01:48:47.937523+00:00

Affected: Unknown Simple Membership

The Simple Membership WordPress plugin before 4.7.8 does not verify whether user creation failed during registration before using the returned value as a user ID to update an account, allowing unauthenticated attackers to overwrite the primary administrator's account data (including the email address) and take over that account through the password reset flow.