<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 16 Oct 2026 11:46:53 +0000</lastBuildDate>
    <item>
      <title>CVE-2025-13820 — Comments – wpDiscuz &lt; 7.6.40 - Unauthenticated Account Takeover</title>
      <link>https://cve.radiocsirt.org/vuln/cve-2025-13820</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Unknown Comments&lt;/p&gt;
&lt;p&gt;The Comments  WordPress plugin before 7.6.40 does not properly validate user&amp;#39;s identity when using the disqus.com provider, allowing an attacker to log in to any user (when knowing their email address) when such user does not have an account on disqus.com yet.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Unknown Comments&lt;/p&gt;
&lt;p&gt;The Comments  WordPress plugin before 7.6.40 does not properly validate user&amp;#39;s identity when using the disqus.com provider, allowing an attacker to log in to any user (when knowing their email address) when such user does not have an account on disqus.com yet.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cve-2025-13820</guid>
    </item>
  </channel>
</rss>
