799 matches found
CVE-2026-28185 WordPress Log in with Google plugin <= 1.4.2 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Log in with Google = 1.4.2 versions...
CVE-2026-28185
The CVE-2026-28185 entry concerns the WordPress plugin “Login with Google” (
EUVD-2026-57963
Unauthenticated Broken Authentication in Log in with Google = 1.4.2 versions...
CVE-2026-28008
CVE-2026-28008 affects the WordPress plugin OAuth Single Sign On – SSO (OAuth Client) for versions ≤ 7.0.0. The vulnerability is described as Unauthenticated Broken Authentication , exposing a high-severity risk with a CVSSv3.1 base score of 9.8 (CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Th...
CVE-2026-28008 WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...
EUVD-2026-57944
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...
CVE-2026-28008
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...
PT-2026-71510
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...
PT-2026-71529
Unauthenticated Broken Authentication in Log in with Google = 1.4.2 versions...
PT-2026-71571
Unauthenticated Broken Authentication in Cartify = 1.3.0.1 versions...
PT-2026-71560
Unauthenticated Broken Authentication in Salon booking system = 10.30.26 versions...
WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by tomcat102 in WordPress Plugin OAuth Single Sign On – SSO OAuth Client versions = 7.0.0...
CVE-2026-68067
The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active session token for the account matching the supplied email address. An attacker could use an email address to control cloud accounts and access hormone record information and...
WordPress Salon booking system plugin <= 10.30.26 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Evan NR in WordPress Plugin Salon booking system versions = 10.30.26...
CVE-2026-66451
Unauthenticated Broken Authentication in WP Event SOlution = 4.1.9 versions...
CVE-2026-66425
Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder = 1.9.0 versions...
CVE-2026-65542
Unauthenticated Broken Authentication in Super Socializer = 7.14.5 versions...
CVE-2026-66451
Unauthenticated Broken Authentication in WP Event SOlution = 4.1.9 versions...