https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T23:19:32.096708+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-6003 CVE-2025-6003 — WordPress Single Sign-On (SSO) - Multiple Versions - Incorrect Authorization to Sensitive Information Exposure 2026-10-17T23:19:32.098056+00:00

Affected: cyberlord92 WordPress Single Sign-On (SSO) - Single Site Standard, cyberlord92 WordPress Single Sign-On (SSO) - Single Site Premium, cyberlord92 WordPress Single Sign-On (SSO) - Multisite Premium, cyberlord92 WordPress Single Sign-On (SSO) - Single Site Enterprise, cyberlord92 WordPress Single Sign-On (SSO) - Multisite Enterprise, cyberlord92 WordPress Single Sign-On (SSO) - Single Site All-Inclusive, cyberlord92 WordPress Single Sign-On (SSO) - Multisite All-Inclusive

The WordPress Single Sign-On (SSO) plugin for WordPress is vulnerable to unauthorized access due to a misconfigured capability check on a function in all versions up to, and including, the *.5.3 versions of the plugin. This makes it possible for unauthenticated attackers to extract sensitive data including site content that has been restricted to certain users and/or roles.