Skip to content
Threat Feed
Subscribe

Product

Ortto Plugin for WordPress (< 1.0.25)

1 brief RSS
high advisory

Ortto WordPress Plugin: Configuration overwrite via authentication bypass (CVE-2026-113387)

The Ortto plugin for WordPress versions prior to 1.0.25 contains an authentication bypass vulnerability that allows unauthenticated attackers to overwrite plugin configurations via exposed secrets, enabling the injection of arbitrary scripts.

Ortto plugin for WordPress wordpress authentication-bypass web-application cve
2t 1c