https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 06:57:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-287296 EUVD-2026-287296 https://cve.radiocsirt.org/vuln/euvd-2026-287296 https://cve.radiocsirt.org/vuln/fkie_cve-2024-11015 <p>The Sign In With Google plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.8.0. This is due to the &#39;authenticate_user&#39; user function not implementing sufficient null value checks when setting the access token and user information. This makes it possible for unauthenticated attackers to log in as the first user who has signed in using Google OAuth, which could be the site administrator.</p> <p>The Sign In With Google plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.8.0. This is due to the &#39;authenticate_user&#39; user function not implementing sufficient null value checks when setting the access token and user information. This makes it possible for unauthenticated attackers to log in as the first user who has signed in using Google OAuth, which could be the site administrator.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-11015 https://cve.radiocsirt.org/vuln/ghsa-jcrg-xwmr-3vgm <p>The Sign In With Google plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.8.0. This is due to the &#39;authenticate_user&#39; user function not implementing sufficient null value checks when setting the access token and user information. This makes it possible for unauthenticated attackers to log in as the first user who has signed in using Google OAuth, which could be the site administrator.</p> <p>The Sign In With Google plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.8.0. This is due to the &#39;authenticate_user&#39; user function not implementing sufficient null value checks when setting the access token and user information. This makes it possible for unauthenticated attackers to log in as the first user who has signed in using Google OAuth, which could be the site administrator.</p> https://cve.radiocsirt.org/vuln/ghsa-jcrg-xwmr-3vgm