Post #124107 5 Oct 13, 2026, 14:43 UTC CVE Alert: CVE-2026-109312 - getgrav - grav-plugin-login - https://www.redpacketsecurity.com/cve-alert-cve-2026-109312-getgrav-grav-plugin-login/ RedPacket Security CVE Alert: CVE-2026-109312 - getgrav - grav-plugin-login - RedPacket Security Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass in processUserProfile(), which checks that the session user exists but not that a