Vulnerability in Single Sign On For Tng

CVE-2026-16299

The Single Sign On For TNG WordPress plugin before 2.2.0 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full…

Affected products

  • Unknown Single Sign On For Tng — versions 0

References