Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 20:28:41 +0000 CVE-2026-77010 — HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Moderator Join URL Disclosure and Class A… https://cve.radiocsirt.org/vuln/cve-2026-77010 <p><strong>Affected:</strong> Unknown HEL Online Classroom: AI-powered Online Classrooms</p> <p>The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation checks on its REST API routes and does not consistently enforce the per-class access code, allowing unauthenticated users to obtain a signed meeting join link for any classroom, including one protected by an access code, and to join it with moderator privileges.</p> <p><strong>Affected:</strong> Unknown HEL Online Classroom: AI-powered Online Classrooms</p> <p>The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation checks on its REST API routes and does not consistently enforce the per-class access code, allowing unauthenticated users to obtain a signed meeting join link for any classroom, including one protected by an access code, and to join it with moderator privileges.</p> https://cve.radiocsirt.org/vuln/cve-2026-77010