CVE-2026-84734

Name of the Vulnerable Software and Affected Versions Mindstien Quick Login versions prior to 1.1

Description Improper session validation allows unauthenticated attackers to obtain an authenticated session for the account configured in the plugin. This occurs because the plugin does not correctly validate a value supplied in the request against the visitor's own session before authentication. If the plugin is configured with an administrator account, this can lead to a complete website compromise. Forensic triage suggests reviewing suspicious requests involving the mql pass variable.

Recommendations Immediately disable the plugin on affected installations. Revoke suspicious sessions and investigate administrator activity.