CVE-2026-116610
Last modified
CVE-2026-116610 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. The Clean Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.20.1 due to a missing capability check on the CleanLogin_Shortcode::get_pages_with_shortcodes() function hooked to the save_post action. This makes it possible for authenticated attackers, with Contributor-level access and above, to overwrite the plugin's cl_login_url/cl_login_id/cl_register_url/cl_register_id/cl_restore_url/cl_restore_id/cl_edit_url/cl_edit_id/cl_change_password_url/cl_change_password_id options with the ID and permalink of a post they themselves authored — simply by embedding the plugin's shortcodes in their own post content.. EPSS estimates a 0.20% chance of exploitation in the next 30 days.
Description
The Clean Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.20.1 due to a missing capability check on the CleanLogin_Shortcode::get_pages_with_shortcodes() function hooked to the save_post action. This makes it possible for authenticated attackers, with Contributor-level access and above, to overwrite the plugin's cl_login_url/cl_login_id/cl_register_url/cl_register_id/cl_restore_url/cl_restore_id/cl_edit_url/cl_edit_id/cl_change_password_url/cl_change_password_id options with the ID and permalink of a post they themselves authored — simply by embedding the plugin's shortcodes in their own post content.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| hornero | Clean Login | <= 1.20.1 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-116610?
How severe is CVE-2026-116610?
How do I fix CVE-2026-116610?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-116603A flaw has been found in SourceCodester Online Food Ordering…4.7
- CVE-2026-116604A vulnerability has been found in SourceCodester Online Food…6.5
- CVE-2026-116605A vulnerability was found in SourceCodester Online Food Orde…5.3
- CVE-2026-116608A security vulnerability has been detected in DAMO Academy V…5.4
- CVE-2026-116609The WP Visitor Statistics (Real Time Traffic) plugin for Wor…6.5
- CVE-2026-11661Use after free in Views in Google Chrome on Windows prior to…8.3
- CVE-2026-116612A flaw was found in GStreamer Editing Services (gst-editing-…7.8
- CVE-2026-116613The Animated Text Block plugin for WordPress is vulnerable t…7.5
- CVE-2026-11662Type Confusion in Bindings in Google Chrome prior to 149.0.7…8.8
- CVE-2026-116620A security vulnerability has been detected in Tencent RapidJ…7.3
- CVE-2026-116623A vulnerability was detected in code-projects Simple Content…7.3
- CVE-2026-116627Improper neutralization of input during web page generation …
Are you affected by CVE-2026-116610?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST