← Back to Dashboard

CVE-2026-14559

CRITICAL NVD
CVSS Score
9.8
Severity
CRITICAL
Source
NVD
Published
Sep 11, 2026
Description

The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not verify a user's password before authenticating them, allowing unauthenticated attackers to log in as any registered user, including administrators, by supplying only that user's email address.

View Full Details ← Back