CVE-2026-92965

The TikTok WordPress plugin (versions 1.2.0 – 1.4.1 ) is affected by an unauthenticated OAuth code redemption flaw. The plugin fails to verify that a request is authorized before processing a sign-in code supplied in the URL, allowing any visitor to make the site redeem an arbitrary code against ...