CVE-2026-18468

The vulnerability CVE-2026-18468 affects the WordPress plugin Login & Register Forms prior to 4.0.2. The root cause is that the password reset verification state is not bound to the target account or the verifier, but is keyed on a value controlled by the client. This allows unauthenticated attac...