Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 12 min 163 bronnen 2 kritiek 18 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2026-76792

HIGH · 8.1 CVSS Gepubliceerd: CWE-287

Beschrijving

The User Verification by PickPlugins WordPress plugin before 2.0.49 does not rate limit the verification step of its one-time-password login, and does not expire the generated code, allowing unauthenticated attackers to brute force it and log in as any user, including administrators, where the code is configured to use digits only.

References