https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-23T12:14:20.616906+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-114658 fkie_cve-2026-114658 2026-10-23T12:14:20.619653+00:00

Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the login.invite task that allows page authors to obtain super user accounts. Attackers can define an invitation form granting super access in page frontmatter, submit it unauthenticated, and register the invited address for full site control.

 https://db.gcve.eu/vuln/ghsa-hgwc-2mf9-5m4j GHSA-hgwc-2mf9-5m4j 2026-10-23T12:14:20.619750+00:00

Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the login.invite task that allows page authors to obtain super user accounts. Attackers can define an invitation form granting super access in page frontmatter, submit it unauthenticated, and register the invited address for full site control.