PT-2026-23220

CVE-2026-2418

·

Published

2026-02-12

·

Updated

2026-03-06

Description by

CVSS 3.1
9.1
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Login with Salesforce WordPress plugin version 1.0.2
Description The Login with Salesforce WordPress plugin does not properly validate user access permissions when logging in through Salesforce. This allows unauthenticated users to authenticate as any user, including administrators, simply by knowing their email address.
Recommendations Update the Login with Salesforce WordPress plugin to a version beyond 1.0.2.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2026-2418
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com