What is GHSA-f65r-566x-cp6v?

GHSA-f65r-566x-cp6v is a security advisory published by GitHub Security Advisories with Medium severity. The WPOrLogin WordPress plugin before 3.1.0 does not perform a capability check or validate a...

Which CVE IDs does GHSA-f65r-566x-cp6v cover?

GHSA-f65r-566x-cp6v covers the following CVE IDs: CVE-2026-110691. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f65r-566x-cp6v?

GHSA-f65r-566x-cp6v has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-f65r-566x-cp6vMediumCVSS 6.5

The WPOrLogin WordPress plugin before 3.1.0 does not perform a capability check or validate a...

Vendor

GitHub Security Advisories

Published

October 28, 2026

Last Modified

October 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-110691 →

📋 Description

The WPOrLogin WordPress plugin before 3.1.0 does not perform a capability check or validate a nonce before updating its hidden-login URL settings, which could allow unauthenticated attackers to reassign the login, registration and password-recovery slugs and lock the administrator out of the login interface.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-110691
https://wpscan.com/vulnerability/1a5731c4-1bca-4136-bfa8-37e30e86c588
https://github.com/advisories/GHSA-f65r-566x-cp6v