CVE-2026-16310

The MemberDash plugin for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) in all versions up to and including 1.8.5 . The flaw resides in the 'id' parameter , where missing validation on a user-controlled key allows unauthenticated attackers to change the password of any Wor...