PULSE
EN VIVO40señales / 24h
EN
FEED
ransomkrybit reclama a reflet2000.fr · FR · Otherransomkrybit reclama a www.actini.com · FR · Technologyransomkrybit reclama a www.ernat-bureau-etudes.fr · FR · Professional Servicesransomkrybit reclama a www.serengetiestates.co.za · ZA · Not Foundransomkrybit reclama a www.hymiasa.com · PE · Otherransomsilentransomgroup reclama a Mayer Brown · US · Professional Servicesransomqilin reclama a Crystal Pharmatech · US · Healthcareransomplay reclama a Signature Services · Professional Servicesransomplay reclama a GCATS Investments · US · Financial Servicesransomplay reclama a Platinum Group · SG · Manufacturingransomlynx reclama a www.jerryleigh.com · US · Otherransomlynx reclama a www.talbotdes.org · GB · Otherransomgammax reclama a King International LLC · US · Otherransomqilin reclama a AmSpec · US · Energy & Utilitiesransomkrybit reclama a reflet2000.fr · FR · Otherransomkrybit reclama a www.actini.com · FR · Technologyransomkrybit reclama a www.ernat-bureau-etudes.fr · FR · Professional Servicesransomkrybit reclama a www.serengetiestates.co.za · ZA · Not Foundransomkrybit reclama a www.hymiasa.com · PE · Otherransomsilentransomgroup reclama a Mayer Brown · US · Professional Servicesransomqilin reclama a Crystal Pharmatech · US · Healthcareransomplay reclama a Signature Services · Professional Servicesransomplay reclama a GCATS Investments · US · Financial Servicesransomplay reclama a Platinum Group · SG · Manufacturingransomlynx reclama a www.jerryleigh.com · US · Otherransomlynx reclama a www.talbotdes.org · GB · Otherransomgammax reclama a King International LLC · US · Otherransomqilin reclama a AmSpec · US · Energy & Utilities
← Todos los CVEs
CVE Watch6 ago 2026

CVE-2026-13342

The Security Optimizer WordPress plugin from 1.5.8 to 1.6.4 does not correctly validate requests to its optional IP-based login restriction

CVSS

5.3

Medio

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 6 ago 2026 · Última mod.: 6 ago 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

The Security Optimizer WordPress plugin from 1.5.8 to 1.6.4 does not correctly validate requests to its optional IP-based login restriction feature, allowing the restriction to be bypassed so that unauthenticated requests from non-allowlisted IP addresses can reach and use the login form, defeating the access control the administrator configured.

Referencias oficiales
CVEs relacionados

Sin CVEs relacionados por CWE o producto.