Authentication Bypass Vulnerability in Wild Apricot Login Plugin for WordPress

CVE-2026-93757

What is CVE-2026-93757?

The Wild Apricot Login plugin for WordPress is susceptible to an authentication bypass due to improper handling of Single Sign-On (SSO) login requests. When a user attempts to log in with SSO and no corresponding WildApricot contact-ID mapping exists, the plugin resorts to a fallback method that queries the WordPress user database based solely on the email address. This process lacks essential verification steps, thereby allowing attackers with specific WildApricot membership access to impersonate legitimate WordPress subsite administrators. The attack hinges on the assailant controlling a WildApricot account with an email address that matches that of the targeted WordPress administrator, giving them a valid authentication cookie that can be used across any affected subsites within the network.

References