Authentication Bypass in Wurdey Plugin for WordPress
CVE-2026-110955
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-110955?
The Wurdey WordPress plugin, up to version 1.0.0, is susceptible to an authentication bypass flaw. This vulnerability permits unauthorized individuals to authenticate as administrators by simply knowing the administrator's username, bypassing the need for a valid request signature. This allows attackers to gain control over the site, which could lead to further exploitation of the system and sensitive data compromise.
Affected Version(s)
Wurdey 0 <= 1.0.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.