Veille CVE

Recherche « Unknown Block User Account »

3 CVE

Critique 0 Élevée 0 Moyenne 2 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Block User Account » ✕
  1. CVE-2026-88828 5.4 Moyenne

    Unknown Blacklist Manager

    The Blacklist Manager for WooCommerce WordPress plugin from 1.3.0 to 2.3.1 does not enforce its user blocking on every authentication path, allowing the holder of an account the site owner has blocked to keep authenticating with that account's privileges, without the block being enforced or recorded.

  2. CVE-2026-18356 3.7 Faible

    Unknown Limit Login Attempts Security

    The Limit Login Attempts Reloaded WordPress plugin before 3.3.5 does not compare logins against its username denylist case-insensitively and does not account for the account's email address, allowing an account an administrator intended to block from logging in to authenticate anyway.

  3. CVE-2026-18960 5.4 Moyenne

    Unknown Block User Account

    The Block User Account WordPress plugin before 2.0.1 does not enforce its account block on every authentication path, allowing a blocked user who holds an application password created before the block to retain their full role-level read and write access through the REST API.