CVE-2026-28185

CriticalCVSS 9.8

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

Unauthenticated Broken Authentication vulnerability in Log in with Google versions up to 1.4.2. An attacker can bypass authentication mechanisms without logging in.

Risk Assessment

Risk includes unauthorized access to user accounts, potentially leading to data theft or account takeover.

Recommendation

Update the plugin to the latest patched version. Implement additional authentication mechanisms and monitor login logs.

Original NVD description (English source)

Unauthenticated Broken Authentication in Log in with Google <= 1.4.2 versions.