Skip to content
Threat Feed
Subscribe

Vendor

Wild Apricot

1 brief RSS
high advisory

Wild Apricot Login: Authentication bypass via SSO account binding (CVE-2026-93757)

The Wild Apricot Login plugin for WordPress (<= 1.0.18) is vulnerable to authentication bypass where attackers can hijack administrative sessions by binding malicious WildApricot accounts to existing WordPress user emails via insecure SSO account mapping.

Wild Apricot Login wordpress sso authentication-bypass cve-2026-93757
2t 1c