https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 12:34:09 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-308175 EUVD-2026-308175 https://cve.radiocsirt.org/vuln/euvd-2026-308175 https://cve.radiocsirt.org/vuln/fkie_cve-2026-7567 <p>The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.0.0. This is due to improper input validation in the maybe_login_temporary_user() function, which fails to verify that the &#39;temp-login-token&#39; GET parameter is a scalar string before processing it. When the parameter is supplied as an array, PHP&#39;s empty() check is bypassed and sanitize_key() returns an empty string, which is then passed as the meta_value to get_users(). WordPress ignores an empty meta_value and returns all users matching the meta_key &#39;_temporary_login_token&#39;, allowing authentication without a valid token. This makes it possible for unauthenticated attackers to authenticate as any active temporary login user by sending a single crafted GET request.</p> <p>The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.0.0. This is due to improper input validation in the maybe_login_temporary_user() function, which fails to verify that the &#39;temp-login-token&#39; GET parameter is a scalar string before processing it. When the parameter is supplied as an array, PHP&#39;s empty() check is bypassed and sanitize_key() returns an empty string, which is then passed as the meta_value to get_users(). WordPress ignores an empty meta_value and returns all users matching the meta_key &#39;_temporary_login_token&#39;, allowing authentication without a valid token. This makes it possible for unauthenticated attackers to authenticate as any active temporary login user by sending a single crafted GET request.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-7567 https://cve.radiocsirt.org/vuln/ghsa-4v98-7r2c-mxg7 <p>The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.0.0. This is due to improper input validation in the maybe_login_temporary_user() function, which fails to verify that the &#39;temp-login-token&#39; GET parameter is a scalar string before processing it. When the parameter is supplied as an array, PHP&#39;s empty() check is bypassed and sanitize_key() returns an empty string, which is then passed as the meta_value to get_users(). WordPress ignores an empty meta_value and returns all users matching the meta_key &#39;_temporary_login_token&#39;, allowing authentication without a valid token. This makes it possible for unauthenticated attackers to authenticate as any active temporary login user by sending a single crafted GET request.</p> <p>The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.0.0. This is due to improper input validation in the maybe_login_temporary_user() function, which fails to verify that the &#39;temp-login-token&#39; GET parameter is a scalar string before processing it. When the parameter is supplied as an array, PHP&#39;s empty() check is bypassed and sanitize_key() returns an empty string, which is then passed as the meta_value to get_users(). WordPress ignores an empty meta_value and returns all users matching the meta_key &#39;_temporary_login_token&#39;, allowing authentication without a valid token. This makes it possible for unauthenticated attackers to authenticate as any active temporary login user by sending a single crafted GET request.</p> https://cve.radiocsirt.org/vuln/ghsa-4v98-7r2c-mxg7