CVE-2026-93757

CVE-2026-93757 published: The Wild Apricot Login plugin for WordPress is vulnerable to Authentication Bypass via SSO Email-Collision Account Binding in all versions up to, and including, 1.0.18. When no WildApricot contact-ID mapping is found for an incoming SSO login, the plugin fa...

View full NVD advisory → ← Back to CVE watch