Skip to content
OpenAdvisories

Vendor

wild-apricot

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    Wild Apricot Login <= 1.0.18 - Authentication Bypass via SSO Email-Collision Account Binding on Multisite

    The Wild Apricot Login plugin for WordPress is vulnerable to Authentication Bypass via SSO Email-Collision Account Binding in all versions up to, and including, 1.0.18. When no WildApricot contact-ID mapping is found for an incoming SSO login, the plugin fall…