Filtered by vendor Wordpress-extensions Subscriptions
Filtered by product Wurdey Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-110955 1 Wordpress-extensions 1 Wurdey 2026-11-12 9.8 Critical
The Wurdey WordPress plugin through 1.0.0 does not verify a request signature before logging a user in, allowing unauthenticated attackers to authenticate as an administrator knowing only the administrator's username.