Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Temporary Login Without Password 1.9.9 Clear all filters
TI-2026-54147 CVE-2026-77753 · GHSA-67c7-wvpf-h5rm

Temporary Login Without Password < 1.9.9 - Authenticated Temporary Access Revocation Bypass via Application Passwords

Priority LOW 25

The Temporary Login Without Password WordPress plugin before 1.9.9 does not prevent a temporary user from creating an Application Password, and does not revoke one when the temporary access expires or is disabled, allowi…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00321 Published 2026-09-12 Fixed in 1.9.9 CWE-284
TI-2026-54146 CVE-2026-77752 · GHSA-9gpw-xjv2-w8fg

Temporary Login Without Password 1.5 - 1.9.8 - Multisite Subsite Admin+ Network Super Admin Privilege Escalation

Priority LOW 34

The Temporary Login Without Password WordPress plugin before 1.9.9 does not verify that the user requesting a temporary login holds network super admin rights before granting the new account those rights, allowing an adm…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00462 Published 2026-09-12 Fixed in 1.9.9 CWE-269