Vulnerability in Block User Account

CVE-2026-18960

The Block User Account WordPress plugin before 2.0.1 does not enforce its account block on every authentication path, allowing a blocked user who holds an application password created before the block to retain their full role-level read a…

Affected products

  • Unknown Block User Account — versions 0

References