Lucene search
+L

6 matches found

Kitploit
Kitploit
•added 2026/10/08 4:30 p.m.•14 views

By-Poloss..-..CVE-2026-19125

CVE-2026-19125 — EthPress login; // wpsetauthcookie Execution continues into the login block, Address::login resolves the attacker-supplied wallet address to its owning WordPress user, and wpsetauthcookie authenticates that user. The response is "success":true,"data":"message":"Logged in". 2...

8.1CVSS6AI score0.00635EPSS
SaveExploits1
EUVD
EUVD
•added 2026/09/24 12:30 a.m.•15 views

EUVD-2026-85703

The EthPress – Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.3.5. This is due to the verifylogin function in app/Login.php containing a missing return statement in the signature verification failure branch — when Signature::verify2...

8.1CVSS5.7AI score0.00635EPSS
SaveExploits1References7
NVD
NVD
•added 2026/09/23 10:16 p.m.•18 views

CVE-2026-19125

The EthPress – Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.3.5. This is due to the verifylogin function in app/Login.php containing a missing return statement in the signature verification failure branch — when Signature::verify2...

8.1CVSS0.00635EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2026/09/23 9:27 p.m.•46 views

CVE-2026-19125 EthPress <= 2.3.5 - Unauthenticated Authentication Bypass

The EthPress – Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.3.5. This is due to the verifylogin function in app/Login.php containing a missing return statement in the signature verification failure branch — when Signature::verify2...

8.1CVSS0.00635EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2026/09/23 9:27 p.m.•17 views

CVE-2026-19125 EthPress <= 2.3.5 - Unauthenticated Authentication Bypass

The EthPress – Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.3.5. This is due to the verifylogin function in app/Login.php containing a missing return statement in the signature verification failure branch — when Signature::verify2...

8.1CVSS5.7AI score0.00635EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•11 views

CVE-2026-19125: Improper Authentication

The EthPress – Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.3.5. This is due to the verifylogin function in app/Login.php containing a missing return statement in the signature verification failure branch — when Signature::verify2...

8.1CVSS5.7AI score0.00635EPSS
SaveExploits1References2
Rows per page
Query Builder