CVE-2026-19125 EthPress <= 2.3.5 - Unauthenticated Authentication Bypass

The EthPress – Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.3.5. This is due to the verifylogin function in app/Login.php containing a missing return statement in the signature verification failure branch — when Signature::verify2...

PT-2026-97598

Name of the Vulnerable Software and Affected Versions EthPress – Web3 Login plugin for WordPress versions prior to 2.3.6 Description An authentication bypass exists due to a missing return statement in the verify login function within app/Login.php. When the Signature::verify2 function detects a...