{"uuid": "39e5d1f0-12c2-433e-bf15-66acab97998a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-104803", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117415793431162883", "content": "WPCOM Member plugin (\u22641.7.27) suffers CRITICAL auth bypass (CVE-2026-104803, CVSS 9.8) \ud83d\udee1\ufe0f. Attackers can impersonate any WordPress user via social-login flaw. Disable social login & check vendor for fixes. https://radar.offseq.com/threat/cve-2026-104803-cwe-287-improper-authentication-in-whyun-wpcom-member-4f47db1288fd1984 #OffSeq #WordPress #Infosec #CVE2026104803", "creation_timestamp": "2026-10-10T09:00:25.330719Z"}