Volerion logoVolerion
Volerion logoVolerion

PickPlugins User Verification WordPress Plugin Weak Authentication Vulnerability

Vulnerability

A weak authentication vulnerability has been identified in the PickPlugins User Verification WordPress plugin, specifically in versions through 2.0.45. This vulnerability allows for authentication abuse, potentially enabling unauthorized users to perform actions reserved for higher-privileged users, such as gaining admin access to a website.

Impact

Exploitation of this vulnerability could lead to broken authentication, allowing unauthorized users to gain admin access on affected WordPress sites.

Remediation

Users of the PickPlugins User Verification WordPress plugin should update to version 2.0.46 or later. Patchstack users can enable auto-update for vulnerable plugins.

Added: Mar 25, 2026, 6:52 PM
Updated: Mar 25, 2026, 6:52 PM

Vulnerability Rating

Custom Algorithm
spread
5.2
impact
1.3
exploitability
7.6
remediation
7.7
relevance
4.7
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.