critical9.1
CVE-2026-2418
The Login with Salesforce WordPress plugin through 1.0.2 does not validate that users are allowed to login through Salesforce, allowing unauthenticated users t…
Impact
The Login with Salesforce WordPress plugin through 1.0.2 does not validate that users are allowed to login through Salesforce, allowing unauthenticated users to be authenticated as any user (such as admin) by simply knowing the email
Affected products
| Product | Affected versions |
|---|---|
| Login With Salesforce WordPress Plugin | through 1.0.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.