Skip to content
OpenAdvisories

Vendor

elemntor

25 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-7567 Public exploit

    Temporary Login <= 1.0.0 - Authentication Bypass to Account Takeover

    The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.0.0. This is due to improper input validation in the maybe_login_temporary_user() function, which fails to verify that the 'temp-login-token' GET…