CVE-2026-16299
Single Sign On For TNG < 2.2.0 - Unauthenticated Arbitrary Password Reset
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Single Sign On For TNG WordPress plugin before 2.2.0 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover.
| Vendor | unknown |
| Product | single sign on for tng |
| Published | Aug 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown single sign on for tng
Be the first to know when new unknown vulnerabilities affecting unknown single sign on for tng are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Single Sign On For TNG
0 < 2.2.0
References
Credits
moonge WPScan