https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T02:16:27.346320+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-11196 CVE-2025-11196 — External Login <= 1.11.2 - Authenticated (Subscriber+) Sensitive Data Exposure via Test Connection 2026-10-19T02:16:27.361619+00:00

Affected: tbenyon External Login

The External Login plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.11.2 due to the 'exlog_test_connection' AJAX action lacking capability checks or nonce validation. This makes it possible for authenticated attackers, with subscriber-level access and above, to query the configured external database and retrieve truncated usernames, email addresses, and password hashes via the diagnostic test results view.