Authentication Bypass in Zonify WordPress Plugin by Zonify
CVE-2026-87842
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-87842?
The Zonify WordPress plugin prior to version 1.0.5 has a significant security flaw that lacks the required capability or authentication checks. This vulnerability enables attackers to access the stored account login token without proper authentication. As a result, unauthorized users can exploit this weakness to authenticate to the site owner's linked service account, potentially leading to unauthorized access and significant security risks.
Affected Version(s)
Zonify 0 < 1.0.5
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.