CVE-2026-88827 - Disable Users <= 1.0.5 - Disabled Account Authentication Bypass via XML-RPC and Application Passwords
CVE ID :CVE-2026-88827 Published : Oct. 11, 2026, 7:17 a.m. | 6 hours, 13 minutes ago Description :The Disable Users WordPress plugin through 1.0.5 does not enforce its account-disabling control on all authentication paths, allowing the holder of an account an administrator has disabled to...