TI-2026-81756 CVE-2026-116610 · GHSA-v79r-g77x-46wf
Missing authorization in Clean Login lets contributors alter options
Priority LOW 19
The Clean Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.20.1 due to a missing capability check on the CleanLogin_Shortcode::get_pages_with_shortcodes() function hoo…