CVE-2026-16299

creationtimestamp| type| source ---|---|--- 2026-08-11 20:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msthww6rkf2o...

CVE-2026-16299 Single Sign On For TNG < 2.2.0 - Unauthenticated Arbitrary Password Reset

The Single Sign On For TNG WordPress plugin before 2.2.0 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover...