CVE-2026-92965

The TikTok WordPress plugin before 1.4.2 does not check that a request is authorised before acting on a sign-in code supplied in the URL, so any visitor can make the site redeem a code of their choosing against the advertising platform, using the site's own credentials. It matches that code...

EUVD-2026-83679

The TikTok WordPress plugin before 1.4.2 does not check that a request is authorised before acting on a sign-in code supplied in the URL, so any visitor can make the site redeem a code of their choosing against the advertising platform, using the site's own credentials. It matches that code...

CVE-2026-92965

The TikTok WordPress plugin (versions 1.2.0 through 1.4.1 ) suffers from an unauthenticated OAuth code redemption flaw. The plugin fails to verify that a request is authorized before processing a sign-in code supplied in the URL. Because the code is matched loosely—triggering on URLs that merely ...

CVE-2022-25825

Improper access control vulnerability in Samsung Account prior to version 13.1.0.1 allows attackers to access to the authcode for sign-in...