CVE-2026-14861

The User Verification by PickPlugins WordPress plugin, versions prior to 2.0.48 , is vulnerable to an IDOR (Insecure Direct Object Reference) vulnerability. The software fails to verify if a request to resend a verification email is authorized for the specified user and does not bind the protecti...