Skip to content
Threat Feed

Vendor

PickPlugins

1 brief RSS
critical threat

WordPress User Verification Plugin Authentication Bypass Vulnerability

The User Verification by PickPlugins plugin for WordPress is vulnerable to authentication bypass in versions up to 2.0.46 due to a loose PHP comparison, allowing unauthenticated attackers to log in as any verified user by submitting a 'true' OTP value.

User Verification by PickPlugins plugin for WordPress <= 2.0.46 wordpress authentication bypass cve-2026-7458
2r 1t 1c