https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 11:22:06 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-74928 <p>The Project Manager WordPress plugin before 4.0.7 does not have any authorisation check on its import routes, allowing unauthenticated users to create WordPress accounts with a password the attacker already knows, bypassing the site&#39;s own registration setting.</p> <p>The Project Manager WordPress plugin before 4.0.7 does not have any authorisation check on its import routes, allowing unauthenticated users to create WordPress accounts with a password the attacker already knows, bypassing the site&#39;s own registration setting.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-74928 https://vulnerability.circl.lu/vuln/ghsa-p988-59fj-gg73 <p>The Project Manager WordPress plugin before 4.0.7 does not have any authorisation check on its import routes, allowing unauthenticated users to create WordPress accounts with a password the attacker already knows, bypassing the site&#39;s own registration setting.</p> <p>The Project Manager WordPress plugin before 4.0.7 does not have any authorisation check on its import routes, allowing unauthenticated users to create WordPress accounts with a password the attacker already knows, bypassing the site&#39;s own registration setting.</p> https://vulnerability.circl.lu/vuln/ghsa-p988-59fj-gg73