PatchSiren

asVereinbase CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review asVereinbase CVE published 2026-10-24

CVE-2026-110956

The asVereinbase WordPress plugin before 1.1.8 has a critical vulnerability allowing unauthenticated attackers to log in as any user, including administrators, without a valid password or second factor. This requires high priority attention from administrators of WordPress installations using the plugin. The vulnerability allows for unauthorized access, potentially leading to lateral movement and exploita [truncated]