CVE-2026-86709 in Pressengine Plugininfo

Zusammenfassung

von MITRE • 17.09.2026

The Pressengine WordPress plugin through 1.0 does not stop its login handler from issuing a session when authentication fails, allowing unauthenticated attackers to log in as any user, including administrators.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

WPScan

Reservieren

08.09.2026

Veröffentlichung

17.09.2026

Moderieren

akzeptiert

Eintrag

VDB-406318

CPE

bereit

CWE

CWE-287 (bestätigt)

CVSS

7.3 (VulDB)

EPSS

0.00000

KEV

nein

Aktivitäten

very low

Sektor

Hostingprovider

Quellen

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-86709
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-86709
CVE Details	https://www.cvedetails.com/cve/CVE-2026-86709/

◂ Zurück Übersicht Weiter ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!