https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T01:06:36.333290+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-77008 fkie_cve-2026-77008 2026-10-04T01:06:37.342098+00:00

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not have any authorisation or authentication check when saving its settings, allowing unauthenticated users to overwrite them and repoint every online classroom, along with the shared secret those sessions are signed with, at infrastructure of their choosing.

 https://vulnerability.circl.lu/vuln/ghsa-hv52-q9g7-xc97 GHSA-hv52-q9g7-xc97 2026-10-04T01:06:37.342256+00:00

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not have any authorisation or authentication check when saving its settings, allowing unauthenticated users to overwrite them and repoint every online classroom, along with the shared secret those sessions are signed with, at infrastructure of their choosing.