MSRXVulnerabilities / CVE-2026-75903
CVE-2026-75903
Published 2026-10-16 · published (not yet in NVD)
CVE-2026-75903
Vulnity Security <= 1.4.3 - Unauthenticated Authentication Bypass to Administrator via Exposed Pairing Credentials
8.1 HIGH
CVSS 3.1 · CNA
CVSS 3.1 · CNA
0.5%
chance of exploitation in the next 30 days (EPSS; higher than 43% of CVEs)
chance of exploitation in the next 30 days (EPSS; higher than 43% of CVEs)
The Vulnity Security plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.3 This is due to insufficient protection of the delegated-login pairing credential file on Nginx-based installations, where the plugin's generated server configuration snippet guards the wrong directory path. This makes it possible for unauthenticated attackers to retrieve the stored credentials, forge signed REST API requests, and log in as an administrator.
Scores
Affected products
- manuelgalan Vulnity Security: 0 to ≤ 1.4.3
Weakness: CWE-287
3 references (advisories, patches, write-ups)
- https://www.wordfence.com/threat-intel/vulnerabilities/id/5574a52f-cec8-4f79-a3a7-5c13272e5e17?source=cve
- https://plugins.trac.wordpress.org/changeset?reponame=&new=3719373%40vulnity%2Ftags%2F1.4.4&old=3717813%40vulnity%2Ftags%2F1.4.3
- https://plugins.trac.wordpress.org/changeset/3719370/vulnity/trunk/includes/class-static-security.php
Sources: CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.