Vulnerability record/PUBLISHED/Published Nov 14, 2026 06:00:07 UTC
CVE-2026-119258
The Swipe WordPress plugin through 1.4 does not properly authenticate a login request before issuing a WordPress session cookie, allowing unauthenticated attackers to log in as an existing user, including an administrator, when that user has an active app session.
Base scoreN/A/ 10
SeverityNoneCVSS unscored
Exploitability / impact
CVSS metric breakdown
Base severityNone
No CVSS vector is available for this record.
CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering AuthorityWPScan
Last updatedNov 14, 2026 06:00:07 UTC
PublishedNov 14, 2026 06:00:07 UTC
ReservedOct 29, 2026 18:24:33 UTC
Credits
- Naoki Kawahigashi
- WPScan