CVE-2026-18056

HivePress Authentication is a WordPress plugin vulnerable to unauthenticated authentication bypass in all versions up to and including 1.1.4 . The root cause lies in the authenticate_user function's Facebook authenticator, which forwards an attacker-supplied access_token to the Facebook Graph API...