CVE-2026-18468

The Login & Register Forms WordPress plugin before 4.0.2 does not bind the password reset verification state to the account being reset or to the party that completed the verification, keying it instead on a value the client controls, allowing unauthenticated attackers to take over the account of...

CVE-2026-18468

The vulnerability CVE-2026-18468 affects the WordPress plugin Login & Register Forms prior to 4.0.2. The root cause is that the password reset verification state is not bound to the target account or the verifier, but is keyed on a value controlled by the client. This allows unauthenticated attac...

CVE-2023-46538

TP-LINK TL-WR886N V7.03.0.14Build221115Rel.56908n.bin was discovered to contain a stack overflow via the function chkResetVeriRegister...