PT-2026-23220 · Salesforce+1 · Salesforce+1

Khaled Alenazi · Publicado 2026-03-05 · Atualizado 2026-03-06 · CVE-2026-2418

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Login with Salesforce WordPress plugin version 1.0.2

Description The Login with Salesforce WordPress plugin does not properly validate user access permissions when logging in through Salesforce. This allows unauthenticated users to authenticate as any user, including administrators, simply by knowing their email address.

Recommendations Update the Login with Salesforce WordPress plugin to a version beyond 1.0.2.

Exploit

Correção

Identificadores relacionados

CVE-2026-2418

Produtos afetados

Login With Salesforce

Salesforce

Referências · 5

• 🔥 https://wpscan.com/vulnerability/b25c6cbc-39e7-4fa0-af0b-ee7759d2c497 · Exploit
• https://t.me/cveNotify/154487 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-2418 · Nota de Segurança
• https://twitter.com/CVEnew/status/2029454824870486462 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2029564181913997424 · Publicação no Twitter