CWE-288 vulnerabilities

Unauthenticated Broken Authentication in Really Simple SSL <= 9.5.10 versions.

Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend <= 1.18.0 versions.

Unauthenticated Broken Authentication in CloudSecure WP Security <= 1.4.7 versions.

CVE-2026-42378 is a medium severity vulnerability in the WP Full Stripe Free plugin by Themeisle, affecting versions up to and including 8.4.1. It involves broken authentication that allows an attacker to bypass authentication mechanisms using an alternate path or channel. The vulnerability does not impact integrity or availability but results in high confidentiality impact. No official patch or remediation guidance is currently available from the vendor.

Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions.

Subscriber Sensitive Data Exposure in WP SMS <= 7.2.1 versions.

Subscriber Broken Authentication in AutomatorWP <= 5.6.7 versions.

Subscriber Broken Authentication in FunnelKit Automations <= 3.7.3 versions.

CVE-2026-49062 is an authentication bypass vulnerability in WP Engine's Faust.js framework that allows exploitation of the password recovery mechanism. It affects versions prior to 1.8.8. The vulnerability is classified under CWE-288, indicating authentication bypass using an alternate path or channel. The CVSS 3.1 score is 8.8, reflecting high severity with network attack vector, low attack complexity, and no user interaction required.

An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access

The WP Captcha PRO plugin for WordPress, specifically the Advanced Google reCAPTCHA premium version, contains an authentication bypass vulnerability in all versions up to and including 5.38. This flaw allows authenticated users with Subscriber-level access or higher to generate passwordless login links and authenticate as any user, including administrators, leading to full account takeover. The vulnerability arises from insufficient authorization checks in AJAX handlers combined with nonce exposure to low-privileged users.

Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n/a before 2.5.4.1.

Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows Password Recovery Exploitation. This issue affects Wallet System for WooCommerce: from n/a through 2.7.5.

Neotoma versions from 0.6.0 up to but not including 0.11.1 have an authentication bypass vulnerability. The application can mistakenly treat public reverse-proxied requests received over a loopback socket without a Bearer token as local requests. This causes the REST authentication middleware to resolve unauthenticated requests as the local development user, exposing the Inspector and related API without requiring credentials. This issue is fixed in version 0.11.1.

Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to bypass authentication of the Console web application and perform actions as an authenticated user.

CVE-2026-8697 is a high-severity vulnerability in TP-Link Archer C64 v1.0 where the debug SSH service does not enforce authentication rate-limiting. This allows an attacker with adjacent network access to perform unlimited brute-force attempts using the same credentials as the web interface. Successful exploitation can lead to administrative access, compromising the device's confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by the vendor.

A user with physical access to a smartphone can bypass authentication mechanism of Kidsview mobile application and grant himself full access to the device owner's account by interacting with application's push notification. This issue was fixed in version 4.4.3

In Slican telephone exchanges it is possible to manage the control panel remotely. An unauthenticated attacker can connect to the modem via a telephone with a specific caller ID. This allows them to bypass admin authentication and gain full access to the service protocol and configuration panel. This vulnerability is independent of the telephone exchanges configuration. If remote access is disabled, calling with this caller ID will temporarily enable it. This issue was fixed in versions below: - IPL-256: version 6.61.0040 - IPM-032: version 6.61.0040 - CCT-1668: version 6.56.0430 - MAC-6400: version 6.56.0430 - CXS-0424: version 6.30.0510 The issue STILL EXISTS in End-Of-Life telephone exchanges in versions 4.xx and below: - CCT-1668 (CCT1CPU) - MAC-6400 - CXS-0424 These products were discontinued in 2011 and 2012 and and will not receive updates. These products require a hardware update in order to receive a software update. The vendor recommends that users of these devices contact the their service department directly to determine the options for upgrading.

Slican telephone exchanges allow administrative protocol authentication bypass. An attacker can bypass the need to enter login credentials by executing the appropriate command. This issue was fixed in versions below: - NCP: version 1.24.0250 - IPx series: version 6.61.0040 - CCT-1668: version 6.56.0430 - MAC-6400: version 6.56.0430 - CXS-0424: version 6.30.0510 The issue STILL EXISTS in End-Of-Life telephone exchanges in versions 4.xx and below: - CCT-1668 (CCT1CPU) - MAC-6400 - CXS-0424 These products were discontinued in 2011 and 2012 and and will not receive updates. These products require a hardware update in order to receive a software update. The vendor recommends that users of these devices contact the their service department directly to determine the options for upgrading.

Authentication Bypass Using an Alternate Path or Channel vulnerability in ThemeHigh Stripe Payment Gateway for WooCommerce allows Password Recovery Exploitation. This issue affects Stripe Payment Gateway for WooCommerce: from n/a through 5.0.7.