Skip to content
Threat Feed
Subscribe

Vendor

Simpler Checkout

1 brief RSS
high advisory

Simpler Checkout WordPress plugin: Authentication bypass via unconfigured login link (CVE-2026-121870)

The Simpler Checkout plugin for WordPress prior to 1.5.4 fails to initialize secret keys for automatic login, allowing authenticated subscribers to elevate privileges to administrator.

Simpler Checkout
1t 1c