CVE-2026-18960 | Block User Account Plugin up to 2.0.0 on WordPress REST API improper authentication

August 10, 2026 Yanac

A vulnerability labeled as critical has been found in Block User Account Plugin up to 2.0.0 on WordPress. This affects an unknown part of the component REST API. Executing a manipulation can lead to improper authentication.

The identification of this vulnerability is CVE-2026-18960. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More