CyberRota
← Ana sayfaya dön

CVE-2026-16261

UNKNOWN · CVSS N/A

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-08-02T06:16:39.450 · Çekilme zamanı: 2026-08-02T12:05:36.804426+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-16261
Severity
UNKNOWN
CVSS
N/A
EPSS
Yok
WordPress

Orijinal NVD Açıklaması

The login-social WordPress plugin through 1.0.4 does not validate password-reset requests against a reset key or the requester's identity, and it issues authentication sessions from unverified third-party sign-in data, allowing unauthenticated attackers to reset any user's password or log in as any existing account, including administrators, and take over the site.