https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T14:59:34.186838+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2009-2336 CVE-2009-2336 2026-10-24T14:59:34.187998+00:00

The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password request depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. NOTE: the vendor reportedly disputes the significance of this issue, indicating that the behavior exists for "user convenience."