CVE-2026-113616 - LogixFast Auth < 1.0.4 - Unauthenticated Account Takeover via Password Reset
CVE ID :CVE-2026-113616 Published : Oct. 29, 2026, 6:17 a.m. | 6 hours, 7 minutes ago Description :The LogixFast Auth WordPress plugin before 1.0.4 does not deliver its password-reset one-time code to the resolved account's own email address, mailing it to the address supplied in the request...