https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 03:10:36 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-93361 cnvd-2021-93361 https://cve.radiocsirt.org/vuln/cnvd-2021-93361 https://cve.radiocsirt.org/vuln/euvd-2026-24199 EUVD-2026-24199 https://cve.radiocsirt.org/vuln/euvd-2026-24199 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24804 <p>The Simple JWT Login WordPress plugin before 3.2.1 does not have nonce checks when saving its settings, allowing attackers to make a logged in admin changed them. Settings such as HMAC verification secret, account registering and default user roles can be updated, which could result in site takeover.</p> <p>The Simple JWT Login WordPress plugin before 3.2.1 does not have nonce checks when saving its settings, allowing attackers to make a logged in admin changed them. Settings such as HMAC verification secret, account registering and default user roles can be updated, which could result in site takeover.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24804 https://cve.radiocsirt.org/vuln/ghsa-vff3-qp7x-xm37 <p>The Simple JWT Login WordPress plugin before 3.2.1 does not have nonce checks when saving its settings, allowing attackers to make a logged in admin changed them. Settings such as HMAC verification secret, account registering and default user roles can be updated, which could result in site takeover.</p> <p>The Simple JWT Login WordPress plugin before 3.2.1 does not have nonce checks when saving its settings, allowing attackers to make a logged in admin changed them. Settings such as HMAC verification secret, account registering and default user roles can be updated, which could result in site takeover.</p> https://cve.radiocsirt.org/vuln/ghsa-vff3-qp7x-xm37 https://cve.radiocsirt.org/vuln/gsd-2021-24804 gsd-2021-24804 https://cve.radiocsirt.org/vuln/gsd-2021-24804