{"vulnerability": "CVE-2026-84734", "sightings": [{"uuid": "3d54e37f-d174-49c6-8ce2-1594b5a34ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84734", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117420917431738760", "content": "CVE-2026-84734 Mindstien Quick Login <= 1.0 - Unauthenticated Administrator Account Takeover via 'mql_pass' Parameter The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own session before authenticating them, allowing unauthenticated attackers to obtain a session as the administrator account the Mindstien Quick Login WordPress plugin through 1.0 is configured with.\nhttps://www.cve.org/CVERecord?id=CVE-2026-84734https://wpscan.com/vulnerability/648d461c-6610-4566-a310-b02187d68cc9/#CVE_2026_84734#bot", "creation_timestamp": "2026-10-11T06:43:31.124685Z"}, {"uuid": "5e43a8da-4811-4e00-9508-b5b65798d938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84734", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxlzkq6cxs2l", "content": "CVE-2026-84734 - mindstien quick login\nThe Mindstien Quick Login plug\u2011in for WordPress does not properly check a value it receives, so anyone can send a special request and gain the site\u2019s administrator session. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-10-11T12:40:04.213648Z"}]}