{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3avulnity_security_projectvulnity_securitywordpress/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:vulnity_security_project:vulnity_security:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":8.1,"id":"CVE-2026-75903"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Vulnity Security plugin (\u003c= 1.4.3)"],"_cs_severities":["high"],"_cs_tags":["wordpress","authentication-bypass","cve-2026-75903"],"_cs_type":"advisory","_cs_vendors":["WordPress"],"content_html":"\u003cp\u003eThe Vulnity Security plugin for WordPress (versions 1.4.3 and earlier) is susceptible to an authentication bypass vulnerability. The flaw exists on Nginx-based web server installations where the plugin generates a configuration snippet to secure the delegated-login pairing credential file. Due to an incorrect directory path in the server configuration, the credential file remains accessible to unauthorized users. An attacker can exploit this misconfiguration to retrieve the sensitive credentials, forge signed REST API requests, and authenticate as an administrative user. This vulnerability impacts the security of any WordPress installation utilizing the plugin's delegated-login feature on Nginx, potentially leading to a full site takeover.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an unauthenticated remote attacker to gain administrative access to the affected WordPress installation. This enables the attacker to modify site content, install malicious plugins, exfiltrate database information, or pivot further into the underlying hosting infrastructure. As the vulnerability resides in a commonly used security-focused plugin, it poses a significant risk to the integrity and confidentiality of targeted WordPress deployments.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImmediately update the Vulnity Security plugin to a version addressing CVE-2026-75903.\u003c/li\u003e\n\u003cli\u003eAudit Nginx configuration files on WordPress servers for any directives granting read access to the directory containing the plugin's delegated-login pairing credential file.\u003c/li\u003e\n\u003cli\u003eImplement access control restrictions in the Nginx configuration to deny all external requests to the identified credential storage path.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-16T08:26:05Z","date_published":"2026-10-16T08:26:05Z","id":"https://feed.craftedsignal.io/briefs/2026-10-vulnity-auth-bypass/","summary":"An authentication bypass vulnerability (CVE-2026-75903) in the Vulnity Security plugin for WordPress allows unauthenticated attackers to retrieve credentials and gain administrative access via misconfigured Nginx path restrictions.","title":"Authentication Bypass in Vulnity Security Plugin for WordPress","url":"https://feed.craftedsignal.io/briefs/2026-10-vulnity-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:vulnity_security_project:vulnity_security:*:*:*:*:*:wordpress:*:*","version":"https://jsonfeed.org/version/1.1"}