PT-2026-51679 · WordPress · Secufor Oauth

Shivam Kumar

·

CVE-2026-7617

·

Published

2026-06-24

·

Updated

2026-07-02

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Secufor OAuth versions prior to 1.0.8
Description The Secufor OAuth plugin for WordPress contains an unauthorized access flaw resulting from improper verification of user authorization. This allows unauthenticated attackers to disconnect a WordPress site from its linked Secufor account by clearing the stored login token and user login configuration.
Recommendations Update the plugin to a version newer than 1.0.7.

Fix

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-7617

Affected Products

Secufor Oauth