World Wires · story 33976 · official · 1 source(s)

CVE-2026-104803: Critical Authentication Bypass in WPCOM Member Plugin

The WPCOM Member plugin for WordPress up to version 1.7.27 contains a critical authentication bypass vulnerability via social-login callback parameters.

Open in the desk

Coverage

What this site indexes