{"uuid": "dcff4d86-81ff-46de-b74f-91bf42d1af19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://t.me/pphm_HackerNews/2924", "content": "\ud83d\udd34 Critical WordPress Plugin Flaw Allows Unauthenticated Administrator Account Takeover\n\nA critical authentication bypass vulnerability has been identified in the WPMU DEV Dashboard WordPress plugin, which could allow unauthenticated attackers to gain administrator-level access to vulnerable sites configured with Hub Single Sign-On (SSO).\n\nThis vulnerability, tracked as CVE-2026-76581, has a CVSS score of 9.8 and affects WPMU DEV Dashboard versions 5.0.1 and earlier. The plugin has approximately 350,000 active installations. WPMU DEV released version 5.0.2 on August 24, 2026, to address this issue.", "creation_timestamp": "2026-08-28T21:00:04.318436Z"}