VYPR

Notify

by WordPress

Source repositories

CVEs (1)

  • CVE-2026-5229CriMay 15, 2026
    risk 0.57cvss 9.8epss 0.01

    The Form Notify plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.1.10. This is due to the plugin trusting user-controlled cookie data to determine which WordPress account to authenticate after a LINE OAuth login. When LINE doesn't…