https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T18:54:39.469518+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-2446 CVE-2026-2446 — Powerpack for LearnDash < 1.3.0 - Unauthenticated Arbitrary Option Update 2026-10-15T18:54:39.470627+00:00

Affected: Unknown PowerPack for LearnDash

The PowerPack for LearnDash WordPress plugin before 1.3.0 does not have authorization and CRSF checks in an AJAX action, allowing unauthenticated users to update arbitrary WordPress options (such as default_role etc) and create arbitrary admin users