https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T07:20:03.837485+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-3907 CVE-2022-3907 — Clerk < 4.0.0 - Authentication Bypass and API Keys Disclosure 2026-10-06T07:20:05.183090+00:00

Affected: Unknown Clerk

The Clerk WordPress plugin before 4.0.0 is affected by time-based attacks in the validation function for all API requests due to the usage of comparison operators to verify API keys against the ones stored in the site options.