2 matches found
CVE-2026-103646
The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is linked to, and logged in as, an existing WordPress account matching the submitted email address, and its duplicate-account check normalizes that address differently from the looku...
9.8CVSS0.00198EPSS
SaveExploits0References1
EUVD-2026-94761
The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is linked to, and logged in as, an existing WordPress account matching the submitted email address, and its duplicate-account check normalizes that address differently from the looku...
9.8CVSS5.6AI score0.00198EPSS
SaveExploits0References1
20