CVE-2026-16299

Published: Ago 10, 2026 Last Modified: Ago 10, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

The Single Sign On For TNG WordPress plugin before 2.2.0 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0015
Percentile
0,0th
Updated

EPSS Score Trend (Last 2 Days)

https://wpscan.com/vulnerability/06532a5a-ad34-421e-81e3-b4…
https://wpscan.com/vulnerability/06532a5a-ad34-421e-81e3-b4e44e8023ab/