#user-verification

1 article

Security Alerts May 2, 2026

CVE-2026-7458: Authentication bypass in WordPress User Verification by PickPlugins

The User Verification by PickPlugins plugin for WordPress (versions up to and including 2.0.46) allows unauthenticated attackers to log in as any user with a verified email by submitting an OTP value of "true"...