CVE-2026-114658 | GetGrav Login Plugin up to 3.9.12 Invitation login.invite authorization

October 22, 2026 Yanac

A vulnerability described as critical has been identified in GetGrav Login Plugin up to 3.9.12. Impacted is the function login.invite of the component Invitation. Executing a manipulation can lead to missing authorization.

This vulnerability is tracked as CVE-2026-114658. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More