CVE-2026-96228 | sslplugins SSL Wireless SMS Notification Plugin up to 3.8.1 on WordPress Login final_login_ajax_action sslcare_login_phone/cap_data improper authentication (EUVD-2026-112590)

October 29, 2026 Yanac

A vulnerability was found in sslplugins SSL Wireless SMS Notification Plugin up to 3.8.1 on WordPress. It has been declared as critical. The affected element is the function final_login_ajax_action of the component Login Handler. The manipulation of the argument sslcare_login_phone/cap_data results in improper authentication.

This vulnerability is known as CVE-2026-96228. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More