CVE-2026-103646 - Ultimate Multisite < 2.17.0 - Unauthenticated Authentication Bypass via 'email_address' Parameter
CVE ID :CVE-2026-103646 Published : Oct. 8, 2026, 6:16 a.m. | 7 hours, 12 minutes ago Description :The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is linked to, and logged in as, an existing WordPress account matching the...