Filtered by vendor Wordpress-extensions
Subscriptions
Filtered by product Wpcom Member
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-123711 | 1 Wordpress-extensions | 1 Wpcom Member | 2026-11-15 | 8.1 High |
| The WPCOM Member WordPress plugin before 1.8.3 does not limit or bind attempts to verify WeChat login codes, allowing unauthenticated attackers to brute-force a code issued to another user and log in as that user, including administrators, when WeChat official-account keyword login is enabled. | ||||
Page 1 of 1.