CVE-2026-7458

The User Verification by PickPlugins plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.46. This is due to the use of a loose PHP comparison operator to validate OTP codes in the "userverificationformwrapprocessotpLogin" function. This makes it...

CVE-2026-7458

creationtimestamp| type| source ---|---|--- 2026-05-04 01:55:51+00:00| seen| https://bsky.app/profile/nulj.bsky.social/post/3mkykxipqaj2g 2026-05-06 11:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml6m5j4dsv2i 2026-05-10 23:00:14+00:00| seen|...