critical
The Pressengine WordPress plugin through 1.0 does not stop its login handler from issuing a session when authentication fails, allowing unauthenticated attackers to log in as any user, including administrators.
Community intelligence
CVE-2026-86709: CVE-2026-86709: The Pressengine WordPress plugin through 1.0 does not stop its login handler from issuing a session when authentication fails, allowing unauthenticated attacker
The Pressengine WordPress plugin through 1.0 does not stop its login handler from issuing a session when authentication fails, allowing unauthenticated attackers to log in as any user, including administrators.
Daily Threat Intelligence Briefing
Get the latest cyber threats, zero-days, and breach analysis delivered to your inbox every morning.