CVE-2026-28185— WordPress Log in with Google plugin <= 1.4.2 - Broken Authentication vulnerability
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| rtCamp | Log in with Google | n/a≤ 1.4.2 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-28185
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WordPress Log in with Google plugin <= 1.4.2 - Broken Authentication vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Unauthenticated Broken Authentication in Log in with Google <= 1.4.2 versions.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对数据真实性的验证不充分
Source: CVE Program / CVE List V5
Vulnerability Title
WordPress Log in with Google 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WordPress Log in with Google是WordPress基金会开源的一款通过第三方账号实现网站登录功能的插件组件。 WordPress Log in with Google 1.4.2及之前版本存在输入验证错误漏洞，该漏洞源于身份验证机制不当，可能导致未经身份验证的攻击者绕过身份验证。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| rtCamp | Log in with Google | n/a ~ 1.4.2 | - |
II. Public POCs for CVE-2026-28185
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-28185
请登录查看更多情报信息。
News Coverage for CVE-2026-28185 (1)
IV. Related Vulnerabilities
Same vendor: rtCamp
- CVE-2026-59551
WordPress rtMedia for WordPress, BuddyPress and bbPress plug - CVE-2026-59549
WordPress rtMedia for WordPress, BuddyPress and bbPress plug - CVE-2026-14282
GoDAM <= 1.12.2 - Unauthenticated Arbitrary File Upload via - CVE-2026-15287
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Au - CVE-2026-25325
WordPress rtMedia for WordPress, BuddyPress and bbPress plug
Same weakness: CWE-345
- CVE-2026-18674
Kong Mesh multi-zone: the global control plane attributes KD - CVE-2026-74890
openssl_encrypt before 1.4.0 HMAC Authentication Bypass via - CVE-2026-74882
openssl_encrypt before 1.4.0 Insecure Default Configuration - CVE-2026-74875
openssl_encrypt before 1.4.0 Schema Validation Bypass - CVE-2026-73846
CKAN MCP Server: Cache-key canonicalization collision enable
V. Comments for CVE-2026-28185
No comments yet