Skip to content
Threat Feed
Subscribe

Product

Single Sign on for TNG (< 2.1.0)

1 brief RSS
critical advisory

Authentication Bypass in Single Sign On For TNG WordPress Plugin

An unauthenticated password reset vulnerability in the Single Sign On For TNG plugin (CVE-2026-15964) allows attackers to perform full site takeover by bypassing AJAX nonce protections.

PoC Single Sign On For TNG +1
1r 1c 1i updated