critical9.8
CVE-2026-86709
The Pressengine WordPress plugin through 1.0 does not stop its login handler from issuing a session when authentication fails, allowing unauthenticated attacke…
Impact
The Pressengine WordPress plugin through 1.0 does not stop its login handler from issuing a session when authentication fails, allowing unauthenticated attackers to log in as any user, including administrators.
Affected products
| Product | Affected versions |
|---|---|
| Pressengine WordPress Plugin | through 1.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.