PT-2026-71529
CVE-2026-28185
·
تاريخ النشر
2026-08-13
·
تاريخ التحديث
2026-10-23
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Log in with Google versions prior to 1.4.3
Description
An authentication bypass exists in the Log in with Google plugin for WordPress. This flaw allows unauthenticated attackers to circumvent authentication mechanisms and gain unauthorized access to other user accounts, including those with administrator privileges.
Recommendations
Update the plugin to a version newer than 1.4.2.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾