high8.8
CVE-2026-88827
The Disable Users WordPress plugin through 1.0.5 does not enforce its account-disabling control on all authentication paths, allowing the holder of an account …
Impact
The Disable Users WordPress plugin through 1.0.5 does not enforce its account-disabling control on all authentication paths, allowing the holder of an account an administrator has disabled to continue authenticating with the account's full privileges.
Affected products
| Product | Affected versions |
|---|---|
| Disable Users WordPress Plugin | through 1.0.5 |
Versions were read from the advisory text. No structured product data has been published for this record yet.