Skip to content
OpenAdvisories

Vendor

britcoder

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-15964 Public exploit

    Single Sign On For TNG <= 2.0.0 - Unauthenticated Privilege Escalation via Unverified Password Change

    The Single Sign On For TNG plugin for WordPress is vulnerable to Authentication Bypass via unauthenticated password reset in all versions up to, and including, 2.0.0. This is due to the `ssoprocess_ajax()` function — registered on `wp_ajax_nopriv_ssoprocess_a…