Tag

Cve-2026-106015

1 brief RSS

Ecommerce Affiliate: Unauthenticated account takeover via OTP vulnerability (CVE-2026-106015)

The Ecommerce Affiliate plugin for WordPress versions 1.0.0 and below contains a flaw in the OTP authentication flow that allows unauthenticated attackers to perform account takeovers by bypassing verification restrictions.

Ecommerce Affiliate wordpress authentication-bypass cve-2026-106015

1t 1c 8h ago