{"affected":[{"defaultStatus":"unknown","product":"Wurdey","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.0.0","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-110955","cwes":["CWE-287"],"description":"The Wurdey WordPress plugin through 1.0.0 does not verify a request signature before logging a user in, allowing unauthenticated attackers to authenticate as an administrator knowing only the administrator's username.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/3a1a4bb4-01ce-4b4b-8493-4b1a857d2c03/"}],"kev":null,"metrics":[],"modifiedAt":1793944824731,"publishedAt":1793944824731,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/3a1a4bb4-01ce-4b4b-8493-4b1a857d2c03/"}],"remediation":[],"revision":"14bcefb54d3db9928a9db61455818cdb084b752789c549ef123d749568b4c769","sources":[{"modifiedAt":1793944824731,"name":"CNA: WPScan","retrievedAt":1793945309069,"url":"https://www.cve.org/CVERecord?id=CVE-2026-110955"}],"ssvc":null,"status":"published","title":"Wurdey <= 1.0.0 - Unauthenticated Administrator Authentication Bypass","updatedAt":1793945309069}