CVE-2026-92885 | Qode mes Qode Membership Plugin up to 2.0.6.2 on WordPress Facebook OAuth Token Verification Guard qode_membership_login_user_from_social_network email improper authentication

October 27, 2026 Yanac

A vulnerability labeled as critical has been found in Qode mes Qode Membership Plugin up to 2.0.6.2 on WordPress. This affects the function qode_membership_login_user_from_social_network of the component Facebook OAuth Token Verification Guard. Executing a manipulation of the argument email can lead to improper authentication.

This vulnerability is handled as CVE-2026-92885. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More