CVE-2026-93757 | Wild Apricot Login Plugin up to 1.0.18 on WordPress SSO Authentication Module.php syncWaContact improper authentication (EUVD-2026-112591)

October 29, 2026 Yanac

A vulnerability was found in Wild Apricot Login Plugin up to 1.0.18 on WordPress. It has been classified as critical. Impacted is the function UserSynchronizer::syncWaContact of the file Module.php of the component SSO Authentication. The manipulation leads to improper authentication.

This vulnerability is traded as CVE-2026-93757. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More