CYBERHAWK / CVE / CVE-2026-7458

CVE-2026-7458

WordPress User Verification by PickPlugins

CRITICAL CVSS 9.8 vibe

The flaw

Authentication bypass via loose PHP comparison in OTP validation.

What to do

Update plugin beyond v2.0.46

▸ Scan my repo for CVE-2026-7458

References

First seen 2026-05-08 · Tracked by PickBits CyberHawk · Weekly CVE digest