CVE-2026-16299

The Single Sign On For TNG WordPress plugin before 2.2.0 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover...

CVE-2026-16299

The Single Sign On For TNG WordPress plugin before 2.2.0 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover...

PT-2026-69353

Name of the Vulnerable Software and Affected Versions Single Sign On For TNG WordPress plugin versions prior to 2.2.0 Description Insufficient validation of password reset requests allows unauthenticated attackers to reset passwords for any user, including those with administrator privileges,...