Skip to content
OpenAdvisories

Vendor

tiktokbusinessplugin

1 known vulnerabilities.

Products

TikTok 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-18346

    TikTok <= 1.4.1 - Missing Authorization to Unauthenticated TikTok Integration Takeover via 'auth_code' Parameter

    The TikTok plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated atta…

    tiktokbusinessplugin TikTok Web / CMS