Product
The User Session Synchronizer plugin for WordPress contains an authentication bypass vulnerability (CVE-2026-15341) in its synchronize_session() function, allowing unauthenticated attackers to hijack any user account, including administrators.