{"affected":[{"defaultStatus":"unknown","product":"Swipe","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.4","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-119258","cwes":["CWE-287"],"description":"The Swipe WordPress plugin through 1.4 does not properly authenticate a login request before issuing a WordPress session cookie, allowing unauthenticated attackers to log in as an existing user, including an administrator, when that user has an active app session.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/2bb54d38-4fda-4f14-b27e-f50eca1287a3/"}],"kev":null,"metrics":[],"modifiedAt":1794636007391,"publishedAt":1794636007391,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/2bb54d38-4fda-4f14-b27e-f50eca1287a3/"}],"remediation":[],"revision":"a1e4a410c6680b733506fe9897a1d19b4f673b87472e3a7881e7b044f733951a","sources":[{"modifiedAt":1794636007391,"name":"CNA: WPScan","retrievedAt":1794640113665,"url":"https://www.cve.org/CVERecord?id=CVE-2026-119258"}],"ssvc":null,"status":"published","title":"Swipe <= 1.4 - Unauthenticated Authentication Bypass","updatedAt":1794640113665}