PULSE
EN
FEED
ransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomeverstake reclama a ne*****h.comransomauditteam reclama a kx***om · CN · Technologyransompixelleaks reclama a Disclosed · Otherransomdark project reclama a Custom Bakehouse · US · Retail & E-Commerceransomdestello reclama a MAPFRE Brasil 2026 · BR · Financial Servicesransomthegentlemen reclama a MKG Kirchrode · DE · Manufacturingransomn0n reclama a Delta Dental of Missouri · US · Healthcareransomn0n reclama a The Container Store · US · Retail & E-Commerceransomlockbit5 reclama a centratamagroup.com · BR · Otherransommedusalocker reclama a Msn · US · Technologyransommedusalocker reclama a baiapai · Technologyransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomeverstake reclama a ne*****h.comransomauditteam reclama a kx***om · CN · Technologyransompixelleaks reclama a Disclosed · Otherransomdark project reclama a Custom Bakehouse · US · Retail & E-Commerceransomdestello reclama a MAPFRE Brasil 2026 · BR · Financial Servicesransomthegentlemen reclama a MKG Kirchrode · DE · Manufacturingransomn0n reclama a Delta Dental of Missouri · US · Healthcareransomn0n reclama a The Container Store · US · Retail & E-Commerceransomlockbit5 reclama a centratamagroup.com · BR · Otherransommedusalocker reclama a Msn · US · Technologyransommedusalocker reclama a baiapai · Technology
← Todos los CVEs
CVE Watch5 nov 2026

CVE-2026-19256

The All In One Login WordPress plugin before 2.5.0 does not adequately restrict the number of attempts that can be made against the short nu

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

0

0-100

Publicado: 5 nov 2026 · Última mod.: 5 nov 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

The All In One Login WordPress plugin before 2.5.0 does not adequately restrict the number of attempts that can be made against the short numeric code used by its default-enabled passwordless email login, and does not feed those failed attempts into its own brute-force protection, allowing unauthenticated attackers to take over any account including administrators.

Referencias oficiales
CVEs relacionados

Sin CVEs relacionados por CWE o producto.