Skip to content
Saturday, August 22, 2026
KAJ NEWSCYBER · PRIVACY · SECURITY

CVE-2026-76793

The CVE Severity Digest turns the National Vulnerability Database feed into a prioritized security briefing. It groups affected software into practical product families, distinguishes patch and mitigation references from general citations, and ranks the vulnerabilities most likely to matter to technology operators while preserving direct links to the official record.

Records
199
Last changed
Update schedule
17 6 * * * UTC
Coverage
08/15/2026–08/22/2026
Method
Methodology
CVE
CVE-2026-76793
Description
The Firebase Authentication WordPress plugin before 1.7.1 does not require the email address in an authentication token to be verified before matching it to a WordPress account and issuing a session, allowing unauthenticated attackers to log in as any user, including administrators.
Published
08/22/2026
Severity
UNKNOWN
CVSS
Priority score
20