https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T06:32:37.020830+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-13598 fkie_cve-2026-13598 2026-09-29T06:32:37.053670+00:00

The RestrictMate WordPress plugin before 1.3.0 does not restrict the user role supplied during account registration, allowing unauthenticated attackers to create a new administrator account and gain a logged-in administrator session, leading to full site takeover.

 https://vulnerability.circl.lu/vuln/ghsa-vmqg-pqj8-5w8h GHSA-vmqg-pqj8-5w8h 2026-09-29T06:32:37.053784+00:00

The RestrictMate WordPress plugin before 1.3.0 does not restrict the user role supplied during account registration, allowing unauthenticated attackers to create a new administrator account and gain a logged-in administrator session, leading to full site takeover.