https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 22:56:50 +0000 https://vulnerability.circl.lu/vuln/cve-2026-14836 <p><strong>Affected:</strong> Unknown Login &amp; Register Forms</p> <p>The Login &amp; Register Forms WordPress plugin before 3.2.5 does not properly enforce the rate limit on its password-reset verification-code flow, keying both the verification code and the per-source attempt counter on an unauthenticated, client-controlled value, allowing unauthenticated attackers to reset the limit at will and brute-force the code to take over any account, including administrators, when the verification-code reset mode is enabled.</p> <p><strong>Affected:</strong> Unknown Login &amp; Register Forms</p> <p>The Login &amp; Register Forms WordPress plugin before 3.2.5 does not properly enforce the rate limit on its password-reset verification-code flow, keying both the verification code and the per-source attempt counter on an unauthenticated, client-controlled value, allowing unauthenticated attackers to reset the limit at will and brute-force the code to take over any account, including administrators, when the verification-code reset mode is enabled.</p> https://vulnerability.circl.lu/vuln/cve-2026-14836