CVE-2026-92885

The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qodemembershipcheckfacebookuser AJAX action. This is due to a typographic error in the Facebook OAuth token verification guard within t...

CVE-2026-92885 Qode Membership <= 2.0.6.2 - Authentication Bypass via Social Login

The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qodemembershipcheckfacebookuser AJAX action. This is due to a typographic error in the Facebook OAuth token verification guard within t...

EUVD-2026-110640

The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qodemembershipcheckfacebookuser AJAX action. This is due to a typographic error in the Facebook OAuth token verification guard within t...

CVE-2026-92885

The Qode Membership plugin for WordPress (versions up to and including 2.0.6.2 ) is vulnerable to an Authentication Bypass leading to Account Takeover . The root cause is a typographic error in the qode_membership_login_user_from_social_network function where the code checks an undefined variable...

WordPress Qode Membership plugin <= 2.0.6.2 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by 0xwackydawg in WordPress Plugin Qode Membership versions = 2.0.6.2...