CVE-2026-116610Published
Clean Login <= 1.20.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Clean-Login Option Update via 'save_post' Hook
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-116610 · Microsoft / collected KEV context
cve-program · CVE-2026-116610
- https://www.wordfence.com/threat-intel/vulnerabilities/id/83a8c282-8552-420d-842f-acd235ad61b8?source=cve
- https://plugins.trac.wordpress.org/browser/clean-login/tags/1.20.1/include/shortcodes.php#L262
- https://plugins.trac.wordpress.org/browser/clean-login/tags/1.20.1/include/shortcodes.php#L14
- https://plugins.trac.wordpress.org/changeset/3768058/clean-login
- https://plugins.trac.wordpress.org/changeset/3768058/clean-login/trunk/include/shortcodes.php
Related operational evidence
Explicit CVE identifiers- Clean Login <= 1.20.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Clean-Login Option Update via 'save_post' Hook · Newly collected advisory · 28 Oct 2026