Beveiligingsadvies

CVE-2026-2418

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-05 06:00:03

Laatst bijgewerkt 2026-04-02 12:39:57

Toegewezen door WPScan

CVSS-score 9.1

Status PUBLISHED

Beschrijving

The Login with Salesforce WordPress plugin through 1.0.2 does not validate that users are allowed to login through Salesforce, allowing unauthenticated users to be authenticated as any user (such as admin) by simply knowing the email

← Alle CVE's bekijken Bekijk op cve.org ↗