Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 16:51:40 +0000 CVE-2026-14559 — Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Account Takeover https://vulnerability.circl.lu/vuln/cve-2026-14559 <p><strong>Affected:</strong> Unknown teddy-bear-customize-addon</p> <p>The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not verify a user&#39;s password before authenticating them, allowing unauthenticated attackers to log in as any registered user, including administrators, by supplying only that user&#39;s email address.</p> <p><strong>Affected:</strong> Unknown teddy-bear-customize-addon</p> <p>The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not verify a user&#39;s password before authenticating them, allowing unauthenticated attackers to log in as any registered user, including administrators, by supplying only that user&#39;s email address.</p> https://vulnerability.circl.lu/vuln/cve-2026-14559