https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-23T08:12:18.700161+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-114658 CVE-2026-114658 — Grav Login plugin 3.6.0 before 3.9.13 Privilege Escalation via login.invite 2026-10-23T08:12:18.701283+00:00

Affected: getgrav grav-plugin-login

Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the login.invite task that allows page authors to obtain super user accounts. Attackers can define an invitation form granting super access in page frontmatter, submit it unauthenticated, and register the invited address for full site control.