Vulnerability in Smilepass Selfie Login
CVE-2026-77002
The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing unauthenticated users to log in as any registered account, including administrators.
Affected products
- Unknown Smilepass Selfie Login
References
- contact@wpscan.com (technical-description, exploit, vdb-entry)