critical9.8
CVE-2026-84734
The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own session before aut…
Impact
The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own session before authenticating them, allowing unauthenticated attackers to obtain a session as the administrator account the Mindstien Quick Login WordPress plugin through 1.0 is configured with.
Affected products
| Product | Affected versions |
|---|---|
| Mindstien Quick Login WordPress Plugin | through 1.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.