Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The MoreConvert Pro plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.9.14. This is due to the guest waitlist verification flow not invalidating or regenerating verification tokens when the customer email address is changed. This makes it possible for unauthenticated attackers to authenticate as existing users, including administrators, by obtaining a valid guest verification token for an attacker-controlled email, changing the same guest customer email to the target account email through the public waitlist flow, and then using the original verification link.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-05 | 3 | Disclosure2Patch1 |
| 2026-05-14 | 3 | Disclosure1General2 |
| 2026-05-16 | 1 | Patch1 |
CVE: CVE-2026-5722 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory The MoreConvert Pro plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.9.14.
Post summary
The advisory announces a critical authentication bypass vulnerability in the MoreConvert Pro WordPress plugin.
CVSS 9.8 CRITICAL · CVE-2026-5722 · 9.8 → 1.9.14 CVE: CVE-2026-5722 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The post merely announces CVE‑2026‑5722 with a CVSS 9.8 critical rating, offering no proof‑of‑concept, exploit details, or mitigation information.
🚨 CVE-2026-5722 — CVSS 9.8/10 ██████████ The MoreConvert Pro plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including,... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/1bSuwxUJ4C
Post summary
The tweet announces CVE-2026-5722, a critical authentication bypass in the MoreConvert Pro WordPress plugin, and urges users to apply the available patch immediately.
A critical WordPress plugin flaw (CVE-2026-5722) allows attackers to bypass authentication by manipulating email verification tokens. If you use MoreConvert Pro, update immediately to protect your admin accounts from unauthorized access. #Cybersecurity
Post summary
The advisory highlights CVE-2026-5722 in the MoreConvert Pro WordPress plugin, noting an authentication bypass via email verification tokens, and advises users to immediately update to mitigate the risk.
https://lyrie.ai/research/research/cve-2026-5722-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The provided content includes a link and hashtags but lacks detailed information about the CVE, so it can only be classified as a general mention with low confidence.
CVE-2026-5722 Authentication Bypass in MoreConvert Pro WordPress Plugin Versions... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5722 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The tweet announces CVE-2026-5722, an authentication bypass in the MoreConvert Pro WordPress plugin, linking to vulnerability details but providing no PoC, exploit, patch, or evidence of active exploitation.
⚡ New CVE Alert: CVE-2026-5722 📊 Severity: 9.8 🚨 Risk Level: Critical 🧩 Affects: Wordpress Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-5722 #CVE-2026-5722 #CVE #Critical #Wordpress #CyberSecurity #InfoSec https://t.co/qvK133Y24U
Post summary
The tweet announces the discovery of CVE-2026-5722, a critical WordPress vulnerability rated 9.8 on the CVSS scale, but provides no PoC, exploit, active exploitation, or patch details.