Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Clean Login 1.19 Clear all filters
TI-2026-61826 CVE-2026-90977 · GHSA-whxq-7ph8-rv4q

Clean Login < 1.19 - Unauthenticated CAPTCHA Bypass via Empty Session Comparison

Priority LOW 30

The Clean Login WordPress plugin before 1.19 does not verify its registration CAPTCHA when the stored session value is empty, allowing unauthenticated users to bypass the anti-automation control on the registration form…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00374 Published 2026-09-18 Fixed in 1.19 CWE-697
TI-2026-61825 CVE-2026-90976 · GHSA-vm4x-47jq-gqcc

Clean Login < 1.19 - Unauthenticated Account Creation with Registration Disabled

Priority LOW 30

The Clean Login WordPress plugin before 1.19 does not check whether user registration is enabled before creating an account in its registration handler, allowing unauthenticated users to create accounts even when the sit…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00304 Published 2026-09-18 Fixed in 1.19 CWE-284