Review
asVereinbase
CVE published 2026-10-24
CVE-2026-110956
The asVereinbase WordPress plugin before 1.1.8 has a critical vulnerability allowing unauthenticated attackers to log in as any user, including administrators, without a valid password or second factor. This requires high priority attention from administrators of WordPress installations using the plugin. The vulnerability allows for unauthorized access, potentially leading to lateral movement and exploita [truncated]