CVE-2026-88827: CVE-2026-88827: hatalı kimlik doğrulama

Açıklama (NVD)

The Disable Users WordPress plugin through 1.0.5 does not enforce its account-disabling control on all authentication paths, allowing the holder of an account an administrator has disabled to continue authenticating with the account's full privileges.

Özet bilgiler

CVSS v3.1

8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,28 (yüzdelik 21)

CWE

CWE-287

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• wpscan.com
• CWE-287