Lucene search
+L

7 matches found

NVD
NVD
•added 2026/08/03 7:16 a.m.•21 views

CVE-2026-14557

The SoftMarket — Digital Marketplace WordPress plugin through 1.0.0 does not properly validate an authentication token in one branch of its email-verification flow, allowing unauthenticated attackers to obtain a valid session as any verified user by supplying only that user's ID...

9.1CVSS0.00514EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/03 6:00 a.m.•65 views

CVE-2026-14557 SoftMarket <= 1.0.0 - Unauthenticated Account Takeover via Email Verification Bypass

The SoftMarket — Digital Marketplace WordPress plugin through 1.0.0 does not properly validate an authentication token in one branch of its email-verification flow, allowing unauthenticated attackers to obtain a valid session as any verified user by supplying only that user's ID...

0.00514EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/03 6:00 a.m.•16 views

CVE-2026-14557

The SoftMarket — Digital Marketplace WordPress plugin through 1.0.0 does not properly validate an authentication token in one branch of its email-verification flow, allowing unauthenticated attackers to obtain a valid session as any verified user by supplying only that user's ID...

5.5AI score0.00514EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/03 6:00 a.m.•76 views

CVE-2026-14557

The SoftMarket — Digital Marketplace WordPress plugin (versions

9.1CVSS5.8AI score0.00514EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/03 6:00 a.m.•11 views

CVE-2026-14557 SoftMarket <= 1.0.0 - Unauthenticated Account Takeover via Email Verification Bypass

The SoftMarket — Digital Marketplace WordPress plugin through 1.0.0 does not properly validate an authentication token in one branch of its email-verification flow, allowing unauthenticated attackers to obtain a valid session as any verified user by supplying only that user's ID...

5.8AI score0.00514EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/03 6:00 a.m.•21 views

EUVD-2026-52171

The SoftMarket — Digital Marketplace WordPress plugin through 1.0.0 does not properly validate an authentication token in one branch of its email-verification flow, allowing unauthenticated attackers to obtain a valid session as any verified user by supplying only that user's ID...

5.5AI score0.00514EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/08/03 12:00 a.m.•29 views

PT-2026-67043

The SoftMarket — Digital Marketplace WordPress plugin through 1.0.0 does not properly validate an authentication token in one branch of its email-verification flow, allowing unauthenticated attackers to obtain a valid session as any verified user by supplying only that user's ID...

5.5AI score0.00514EPSS
SaveExploits0References2
Rows per page
Query Builder