Curated security research, vulnerabilities, advisories and tools for practitioners.

#cve-2026-2628

Security coverage tagged cve-2026-2628.

1.

Critical auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validation

vulnerability | Critical | 2026-04-10 07:36 | CVE-2026-2628 | yeswehack.com | original ↗ | #cloud | #authentication-bypass | #wordpress