CVE-2026-15964-PoC

CVE-2026-15964 - Single Sign On For TNG = 2.0.0 Nicht authentifizierte Privilegienerweiterung durch ungeprüfte Passwortänderung im WordPress-Plugin Single Sign On For TNG. | ---|--- Schweregrad| Kritisch 9.8 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-620 Ungeprüfte Passwortänderung...

CVE-2026-15964 Single Sign On For TNG <= 2.0.0 - Unauthenticated Privilege Escalation via Unverified Password Change

The Single Sign On For TNG plugin for WordPress is vulnerable to Authentication Bypass via unauthenticated password reset in all versions up to, and including, 2.0.0. This is due to the ssoprocessajax function — registered on wpajaxnoprivssoprocessajax and therefore reachable without authenticati...