CVE-2026-2418
Login with Salesforce <= 1.0.2 - Unauthenticated Authentication Bypass
CVSS Score
9.1
EPSS Score
0.1%
EPSS Percentile
22th
The Login with Salesforce WordPress plugin through 1.0.2 does not validate that users are allowed to login through Salesforce, allowing unauthenticated users to be authenticated as any user (such as admin) by simply knowing the email
| Vendor | unknown |
| Product | login with salesforce |
| Published | Mar 5, 2026 |
| Last Updated | Apr 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown login with salesforce
Be the first to know when new critical vulnerabilities affecting unknown login with salesforce are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Login with Salesforce
0 ≤ 1.0.2
References
Credits
Khaled Alenazi (Nxploited) WPScan