CVE-2026-86710
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 17, 2026
Vendor
unknown
Description
The Login with QR WordPress plugin through 1.0.0 does not verify that the code used to log a user in is one it issued, matching any stored user metadata value instead, which allows unauthenticated attackers to log in as any user, including administrators.