https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:55:03 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-62202 cnvd-2022-62202 https://cve.radiocsirt.org/vuln/cnvd-2022-62202 https://cve.radiocsirt.org/vuln/euvd-2026-24020 EUVD-2026-24020 https://cve.radiocsirt.org/vuln/euvd-2026-24020 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24655 <p>The WP User Manager WordPress plugin before 2.6.3 does not ensure that the user ID to reset the password of is related to the reset key given. As a result, any authenticated user can reset the password (to an arbitrary value) of any user knowing only their ID, and gain access to their account.</p> <p>The WP User Manager WordPress plugin before 2.6.3 does not ensure that the user ID to reset the password of is related to the reset key given. As a result, any authenticated user can reset the password (to an arbitrary value) of any user knowing only their ID, and gain access to their account.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24655 https://cve.radiocsirt.org/vuln/ghsa-x6w7-v4jh-m22f <p>The WP User Manager WordPress plugin before 2.6.3 does not ensure that the user ID to reset the password of is related to the reset key given. As a result, any authenticated user can reset the password (to an arbitrary value) of any user knowing only their ID, and gain access to their account.</p> <p>The WP User Manager WordPress plugin before 2.6.3 does not ensure that the user ID to reset the password of is related to the reset key given. As a result, any authenticated user can reset the password (to an arbitrary value) of any user knowing only their ID, and gain access to their account.</p> https://cve.radiocsirt.org/vuln/ghsa-x6w7-v4jh-m22f https://cve.radiocsirt.org/vuln/gsd-2021-24655 gsd-2021-24655 https://cve.radiocsirt.org/vuln/gsd-2021-24655