Skip to content
Threat Feed
Subscribe

Product

WPO365 | LOGIN (<= 44.1)

1 brief RSS
high advisory

Authentication Bypass via OIDC Nonce Replay in WPO365 Login Plugin

An authentication bypass vulnerability in the WPO365 Login plugin allows unauthenticated attackers to hijack user sessions by replaying previously issued OIDC tokens.

WPO365 | LOGIN wordpress authentication-bypass cve-2026-104759
1t 1c