Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 05:54:17 +0000 CVE-2026-88785 — Simple Membership < 4.8.3 - Newly Registered Member Password Disclosure via URL Query String https://vulnerability.circl.lu/vuln/cve-2026-88785 <p><strong>Affected:</strong> Unknown Simple Membership</p> <p>The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member&#39;s plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser history and in web server, proxy, and CDN access logs to anyone able to read them.</p> <p><strong>Affected:</strong> Unknown Simple Membership</p> <p>The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member&#39;s plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser history and in web server, proxy, and CDN access logs to anyone able to read them.</p> https://vulnerability.circl.lu/vuln/cve-2026-88785