https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:45:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-343869 EUVD-2026-343869 https://cve.radiocsirt.org/vuln/euvd-2026-343869 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14561 <p>The Authora : Easy login with mobile number WordPress plugin before 1.7.7 does not keep its one-time login code confidential, returning the code and a valid verification token in the response of an unauthenticated action, allowing unauthenticated attackers to log in as any user whose registered mobile number they know (including administrators) or to create arbitrary accounts.</p> <p>The Authora : Easy login with mobile number WordPress plugin before 1.7.7 does not keep its one-time login code confidential, returning the code and a valid verification token in the response of an unauthenticated action, allowing unauthenticated attackers to log in as any user whose registered mobile number they know (including administrators) or to create arbitrary accounts.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-14561 https://cve.radiocsirt.org/vuln/ghsa-qh94-hqp6-76h4 <p>The Authora : Easy login with mobile number WordPress plugin before 1.7.7 does not keep its one-time login code confidential, returning the code and a valid verification token in the response of an unauthenticated action, allowing unauthenticated attackers to log in as any user whose registered mobile number they know (including administrators) or to create arbitrary accounts.</p> <p>The Authora : Easy login with mobile number WordPress plugin before 1.7.7 does not keep its one-time login code confidential, returning the code and a valid verification token in the response of an unauthenticated action, allowing unauthenticated attackers to log in as any user whose registered mobile number they know (including administrators) or to create arbitrary accounts.</p> https://cve.radiocsirt.org/vuln/ghsa-qh94-hqp6-76h4