CVE-2026-116610

The Clean Login plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.20.1 . The root cause is a missing capability check in the CleanLogin_Shortcode::get_pages_with_shortcodes() function, which is hooked to the save_post action. This allows authenticated a...