2 lines
1.9 KiB
JSON
2 lines
1.9 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Login with Salesforce","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.0.2","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Login with Salesforce WordPress plugin through 1.0.2 does not validate that users are allowed to login through Salesforce, allowing unauthenticated users to be authenticated as any user (such as admin) by simply knowing the email"},{"lang":"es","value":"El plugin de WordPress Login with Salesforce hasta la versión 1.0.2 no valida que los usuarios tengan permiso para iniciar sesión a través de Salesforce, permitiendo que usuarios no autenticados sean autenticados como cualquier usuario (como un administrador) simplemente conociendo el correo electrónico."}],"id":"CVE-2026-2418","lastModified":"2026-06-17T10:30:55.490","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.2,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-2418","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-03-06T10:22:39.897835Z","version":"2.0.3"}}]},"published":"2026-03-05T06:16:51.883","references":[{"source":"contact@wpscan.com","url":"https://wpscan.com/vulnerability/b25c6cbc-39e7-4fa0-af0b-ee7759d2c497/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Deferred"}
|