PT-2026-26262 · Themepaste · Admin Safety Guard

Published 2026-03-19 · Updated 2026-03-19 · CVE-2026-25471

Mitre

CVSS v3.1

8.1

High

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Authentication Bypass Using an Alternate Path or Channel vulnerability in Themepaste Admin Safety Guard allows Password Recovery Exploitation.This issue affects Admin Safety Guard: from n/a through 1.2.6.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2026-25471

Affected Products

Admin Safety Guard

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-25471 · Security Note
• https://patchstack.com/database/wordpress/plugin/admin-safety-guard/vulnerability/wordpress-admin-safety-guard-plugin-1-2-2-broken-authentication-vulnerability?_s_id=cve · Note