Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 14:27:06 +0000 CVE-2026-74928 — WP Project Manager 2.1.0 - 4.0.6 - Unauthenticated Subscriber Account Creation via Trello Import Routes https://cve.radiocsirt.org/vuln/cve-2026-74928 <p><strong>Affected:</strong> Unknown Project Manager</p> <p>The Project Manager WordPress plugin before 4.0.7 does not have any authorisation check on its import routes, allowing unauthenticated users to create WordPress accounts with a password the attacker already knows, bypassing the site&#39;s own registration setting.</p> <p><strong>Affected:</strong> Unknown Project Manager</p> <p>The Project Manager WordPress plugin before 4.0.7 does not have any authorisation check on its import routes, allowing unauthenticated users to create WordPress accounts with a password the attacker already knows, bypassing the site&#39;s own registration setting.</p> https://cve.radiocsirt.org/vuln/cve-2026-74928