CVE-2026-84737 Freeton WP <= 1.0.0 - Unauthenticated Account Takeover via 'secod' Parameter

The Freeton WP WordPress plugin through 1.0.0 does not correctly validate the activation code when authenticating a user, allowing unauthenticated attackers to log in as any user whose email address they know, including administrators...

CVE-2026-84737

The Freeton WP WordPress plugin (versions through 1.0.0 ) is vulnerable to an unauthenticated account takeover due to improper validation of the activation code during user authentication. An unauthenticated attacker can exploit this flaw to log in as any user whose email address they know, inclu...