Read the docs

wild-apricot

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

wild-apricot records in CISA KEV

No wild-apricot vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-82273 CVE-2026-93757 · GHSA-j3xg-qwqj-hq74

Authentication bypass in Wild Apricot Login plugin for WordPress

Priority LOW 35

The Wild Apricot Login plugin for WordPress is vulnerable to Authentication Bypass via SSO Email-Collision Account Binding in all versions up to, and including, 1.0.18.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00425 Published 2026-10-29 No fix listed CWE-287
Open these records in search →