https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-15T02:14:37.911404+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-76792 fkie_cve-2026-76792 2026-11-15T02:14:37.912654+00:00

The User Verification by PickPlugins WordPress plugin before 2.0.49 does not rate limit the verification step of its one-time-password login, and does not expire the generated code, allowing unauthenticated attackers to brute force it and log in as any user, including administrators, where the code is configured to use digits only.

 https://db.gcve.eu/vuln/ghsa-gmxr-g9qg-qjhg GHSA-gmxr-g9qg-qjhg 2026-11-15T02:14:37.912732+00:00

The User Verification by PickPlugins WordPress plugin before 2.0.49 does not rate limit the verification step of its one-time-password login, and does not expire the generated code, allowing unauthenticated attackers to brute force it and log in as any user, including administrators, where the code is configured to use digits only.