WordPress security by component
Single Sign On For TNG
Plugin description
Single Sign On For TNG is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Aug 01, 2026; the highest published CVSS base score is 9.8.
Plugin slug:
single-sign-on-for-tngLatest vulnerability
CVE-2026-15964: Single Sign On For TNG lets visitors reset any account password
Single Sign On For TNG through 2.0.0 exposes ssoprocess_ajax() through wp_ajax_nopriv_ssoprocess_ajax. A visitor can scrape the shared logged-out ssoajaxnonce from SSOPWDREQUIREMENT on any front-end page, submit a target email with the setnewpassword operation, and make the handler call reset_password() without an ownership token, confirmation link or capability check, taking over any account including an Administrator.
| Safe version |
|
||
|---|---|---|---|
| Aug 01, 2026 |
CVE-2026-15964
Single Sign On For TNG lets visitors reset any account password
Single Sign On For TNG through 2.0.0 exposes ssoprocess_ajax() through wp_ajax_nopriv_ssoprocess_ajax. A visitor can scrape the shared logged-out ssoajaxnonce from SSOPWDREQUIREMENT on any front-end page, submit a target email with the setnewpassword operation, and make the handler call reset_password() without an ownership token, confirmation link or capability check, taking over any account including an Administrator.
|
> 2.0.0 |
CVE9.8
NVDPending
|