← All advisories

High severity7.5NVD Advisory· Published Oct 2, 2020· Updated Jun 17, 2026

CVE-2020-26511

CVE-2020-26511

Description

The wpo365-login plugin before v11.7 for WordPress allows use of a symmetric algorithm to decrypt a JWT token. This leads to authentication bypass.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/wpo365-login plugindescription
WordPress/Wpo365 Loginllm-fuzzy
Range: <11.7
Package: https://wordpress.org/plugins/wpo365-login

Patches

Vulnerability mechanics

References

4

plugins.trac.wordpress.org/changeset/2388992/nvdPatchThird Party Advisory
wordpress.org/plugins/wpo365-login/nvdProductThird Party Advisory
wpvulndb.com/vulnerabilities/10418nvdThird Party Advisory
www.wpo365.com/change-log/nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.