high7.5

CVE-2026-42674

Authentication Bypass by Spoofing vulnerability in AAM Plugin Advanced Access Manager allows URL Encoding.

Impact

Authentication Bypass by Spoofing vulnerability in AAM Plugin Advanced Access Manager allows URL Encoding. This issue affects Advanced Access Manager: from n/a through 7.1.0.

Affected products

Product	Affected versions
Advanced Access Manager: From N/A	through 7.1.0.

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

CWE-290

References

NVD record
CVE.org record
https://patchstack.com/database/wordpress/plugin/advanced-access-manager/vulnerability/wordpress-advanced-access-manager-plugin-7-1-0-bypass-vulnerability-vulnerability?_s_id=cve