{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/simpler-checkout/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:simpler_checkout:simpler_checkout:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-121870"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Simpler Checkout (\u003c 1.5.4)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Simpler Checkout"],"content_html":"\u003cp\u003eThe Simpler Checkout WordPress plugin contains an authentication bypass vulnerability (CVE-2026-121870) due to improper restriction of order creation functionality and an insecure implementation of automatic login links. Until the plugin is manually configured by the store owner, the automatic login key remains empty. This flaw allows low-privileged users, specifically those with 'subscriber' roles, to authenticate as administrators on unconfigured WordPress sites.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows a subscriber-level user to gain administrative privileges on the target WordPress site. This grants full access to site management, plugin settings, and the ability to execute arbitrary administrative actions.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade the Simpler Checkout WordPress plugin to version 1.5.4 or later immediately.\u003c/li\u003e\n\u003cli\u003eReview WordPress user role assignments and audit the administrator list for any unauthorized accounts created or modified since the plugin installation.\u003c/li\u003e\n\u003cli\u003eVerify if the Simpler Checkout plugin has been properly configured in the settings dashboard to ensure the automatic login key is correctly initialized.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-11T13:59:48Z","date_published":"2026-11-11T13:59:48Z","id":"https://feed.craftedsignal.io/briefs/2026-11-simpler-checkout-auth-bypass-cve-2026-121870/","summary":"The Simpler Checkout plugin for WordPress prior to 1.5.4 fails to initialize secret keys for automatic login, allowing authenticated subscribers to elevate privileges to administrator.","title":"Simpler Checkout WordPress plugin: Authentication bypass via unconfigured login link (CVE-2026-121870)","url":"https://feed.craftedsignal.io/briefs/2026-11-simpler-checkout-auth-bypass-cve-2026-121870/"}],"language":"en","title":"CraftedSignal Threat Feed - Simpler Checkout","version":"https://jsonfeed.org/version/1.1"}