CVE-2026-110691

MEDIUM 6.5CVE-2026-110691 · Published 28/10/2026 · updated 28/10/2026

In short

CVE-2026-110691 is a MEDIUM (CVSS 6.5) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.26%, higher than 18.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

The WPOrLogin WordPress plugin before 3.1.0 does not perform a capability check or validate a nonce before updating its hidden-login URL settings, which could allow unauthenticated attackers to reassign the login, registration and password-recovery slugs and lock the administrator out of the login interface.

References

wpscan.com/vulnerability/1a5731c4-1bca-4136-bfa8-37e30e86c588

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free