4 matches found
CVE-2026-93757
The Wild Apricot Login plugin for WordPress is vulnerable to Authentication Bypass via SSO Email-Collision Account Binding in all versions up to, and including, 1.0.18. When no WildApricot contact-ID mapping is found for an incoming SSO login, the plugin falls back to a network-global...
CVE-2026-93757
The Wild Apricot Login plugin for WordPress (all versions up to and including 1.0.18 ) is vulnerable to an Authentication Bypass via SSO Email-Collision Account Binding. The vulnerability occurs because the plugin falls back to a network-global get_user_by('email', ...) lookup in Module.php when ...
CVE-2026-93757 Wild Apricot Login <= 1.0.18 - Authentication Bypass via SSO Email-Collision Account Binding on Multisite
The Wild Apricot Login plugin for WordPress is vulnerable to Authentication Bypass via SSO Email-Collision Account Binding in all versions up to, and including, 1.0.18. When no WildApricot contact-ID mapping is found for an incoming SSO login, the plugin falls back to a network-global...
EUVD-2026-112591
The Wild Apricot Login plugin for WordPress is vulnerable to Authentication Bypass via SSO Email-Collision Account Binding in all versions up to, and including, 1.0.18. When no WildApricot contact-ID mapping is found for an incoming SSO login, the plugin falls back to a network-global...