sangsenimanwartefak/cve-2026-7458Python proof-of-concept exploit for CVE-2026-7458, an unauthenticated authentication bypass in PickPlugins User Verification WordPress plugin via loose OTP comparison, leading to account takeover.
Unauthenticated Authentication Bypass via Loose Comparison in OTP Verification REST API
PickPlugins User Verification ≤ 2.0.46
The User Verification plugin by PickPlugins for WordPress (versions ≤ 2.0.46) contains a critical vulnerability in its OTP login mechanism. Due to a loose comparison (==) in the verification logic, an unauthenticated attacker can bypass OTP authentication by sending a boolean true instead of a numeric OTP value. This grants full access to the target account without ever knowing the OTP.
CVSS Score: 9.8 (Critical)
CWE: CWE-288 (Authentication Bypass Using an Alternate Path)
Attack Vector: Network | Complexity: Low | Privileges: None
| Component | Vulnerable Versions |
|---|---|
| PickPlugins User Verification | ≤ 2.0.46 |
| WordPress (any) | Any (with plugin active) |
python exploit.py -u "http://target.com/otp-login/" -b "http://target.com" -e "[email protected]"