Vendor

Kadence

1 brief RSS

CVE-2026-9273 Password Reset Poisoning in Kadence Memberships

The Kadence Memberships plugin for WordPress is vulnerable to password reset link poisoning, allowing unauthenticated attackers to hijack accounts by redirecting users to malicious hosts to harvest reset tokens.

Membership Plugin - Kadence Memberships web-vulnerability account-takeover wordpress cve-2026-9273

1r 1t 1c 1d ago