9.8
Critique
CVE-2026-16299 The Single Sign On For TNG WordPress plugin before 2.2.0 does not properly validate a password reset request, allowing…
Description
The Single Sign On For TNG WordPress plugin before 2.2.0 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Single Sign On For TNG 2.2 | premières → < 2.2.0 | 2.2.0 |