Veille CVE

Vendredi 18 septembre 2026

2 CVE sur 2

Critique 0 Élevée 0 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Disable Users » ✕
  1. CVE-2026-90976 5.3 Moyenne

    Unknown Clean Login

    The Clean Login WordPress plugin before 1.19 does not check whether user registration is enabled before creating an account in its registration handler, allowing unauthenticated users to create accounts even when the site has registration disabled.

  2. CVE-2026-85123 5.3 Moyenne

    Unknown Easy Form Builder by WhiteStudio

    The Easy Form Builder by WhiteStudio WordPress plugin before 4.2.0 does not validate a submitted value against the stored configuration for some of its form types, allowing unauthenticated users to create WordPress accounts on a site whose owner has disabled registration.