manuelgalan CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH manuelgalan CVE published 2026-10-16

CVE-2026-75903

The Vulnity Security plugin for WordPress is vulnerable to authentication bypass due to insufficient protection of the delegated-login pairing credential file on Nginx-based installations. This allows unauthenticated attackers to retrieve stored credentials, forge signed REST API requests, and log in as an administrator. The vulnerability affects versions up to and including 1.4.3 and is particularly rele [truncated]