CyberSecBulletin

SmilePass Selfie Login vulnerabilities

We track 1 vulnerability in SmilePass Selfie Login products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 22, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest SmilePass Selfie Login vulnerabilities

  • 9.8 Critical severity

    SmilePass Selfie Login: Improper Authentication

    CVE-2026-77002SmilePass Selfie Login

    The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing unauthenticated users to log in as any registered account, including administrators.