Wild Apricot Login
Monthly
Authentication bypass in the Wild Apricot Login plugin for WordPress (all versions through 1.0.18) allows a remote attacker with low privileges (CVSS PR:L) to obtain a valid network-global WordPress authentication cookie for an existing subsite administrator without knowing that administrator's password. The described path requires a path-based WordPress Multisite network, the plugin active on at least one subsite, a WildApricot organization that permits public zero-fee membership signup, and an attacker-controlled WildApricot contact whose email exactly matches the victim administrator's email with no existing contact-ID mapping. Exploitation is conditional and high-complexity per the assessed CVSS vector; no public exploit identified at time of analysis and no CISA KEV entry is present in the provided data, and the priority label is this_week.
Authentication bypass in the Wild Apricot Login plugin for WordPress (all versions through 1.0.18) allows a remote attacker with low privileges (CVSS PR:L) to obtain a valid network-global WordPress authentication cookie for an existing subsite administrator without knowing that administrator's password. The described path requires a path-based WordPress Multisite network, the plugin active on at least one subsite, a WildApricot organization that permits public zero-fee membership signup, and an attacker-controlled WildApricot contact whose email exactly matches the victim administrator's email with no existing contact-ID mapping. Exploitation is conditional and high-complexity per the assessed CVSS vector; no public exploit identified at time of analysis and no CISA KEV entry is present in the provided data, and the priority label is this_week.