critical9.8
CVE-2026-77002
The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing u…
Impact
The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing unauthenticated users to log in as any registered account, including administrators.
Affected products
| Product | Affected versions |
|---|---|
| SmilePass Selfie Login WordPress Plugin | through 1.0.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.