PT-2026-71529
CVE-2026-28185
·
Published
2026-08-13
·
Updated
2026-10-23
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Log in with Google versions prior to 1.4.3
Description
An authentication bypass exists in the Log in with Google plugin for WordPress. This flaw allows unauthenticated attackers to circumvent authentication mechanisms and gain unauthorized access to other user accounts, including those with administrator privileges.
Recommendations
Update the plugin to a version newer than 1.4.2.
Found an issue in the description? Have something to add? Feel free to write us 👾