CVE-2026-19256 | All In One Login Plugin up to 2.4.x on WordPress privileges management

November 5, 2026 Yanac

A vulnerability, which was classified as critical, was found in All In One Login Plugin up to 2.4.x on WordPress. Impacted is an unknown function. The manipulation results in improper privilege management.

This vulnerability is known as CVE-2026-19256. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More