https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T13:54:22.647899+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-77007 fkie_cve-2026-77007 2026-09-28T13:54:22.749905+00:00

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform any authorisation check on one of its REST API routes, allowing unauthenticated users to retrieve its stored settings, including the shared secret used to sign API requests to the connected BigBlueButton server.

 https://vulnerability.circl.lu/vuln/ghsa-m9w9-pq4v-r2qx GHSA-m9w9-pq4v-r2qx 2026-09-28T13:54:22.750130+00:00

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform any authorisation check on one of its REST API routes, allowing unauthenticated users to retrieve its stored settings, including the shared secret used to sign API requests to the connected BigBlueButton server.