Security Advisory

CVE-2026-77002

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-22 06:00:17

Last updated 2026-08-23 15:37:09

Assigner WPScan

CVSS score 9.8

State PUBLISHED

Description

The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing unauthenticated users to log in as any registered account, including administrators.

← Browse all CVEs View on cve.org ↗