Skip to main content
VulnerabilityPublished

https://downloads.wordpress.org/plugin/temporary-login.1.0.0.zip · Wordpress Temporary Login Plugin 1.0.0 - 'temp-login-token' Authentication Bypass to Account Takeover

Affects https://downloads.wordpress.org/plugin/temporary-login.1.0.0.zipSource Exploit-DB RSS Feed

0
Severity
Medium

Rated by Threat Radar

Data as of 24 Jun 2026, 22:21 UTC

What to do

Affected software

ProductAffectedFixed in
https://wordpress.org https://downloads.wordpress.org/plugin/temporary-login.1.0.0.zipAffected
  • <=1.0.0
Fixed in–

AI-suggested

Until an official fix is available, consider disabling the Temporary Login Plugin or restricting its usage to trusted administrators only to reduce exposure.

Description

The Wordpress Temporary Login Plugin version 1.0.0 contains an authentication bypass vulnerability via the 'temp-login-token' parameter that can lead to account takeover. This vulnerability affects version 1.0.0 and earlier. No official patch or remediation information is provided. The severity is assessed as medium based on the potential for unauthorized account access.

References

Community reviews

Loading reviews…