CVE-2026-25471

WordPress Admin Safety Guard plugin <= 1.2.6 - Broken Authentication vulnerability

Published Mar 19, 2026 CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in Themepaste Admin Safety Guard admin-safety-guard allows Password Recovery Exploitation.This issue affects Admin Safety Guard: from n/a through <= 1.2.6.

Analysis

Technical impact

The Admin Safety Guard plugin for WordPress contains an authentication bypass that allows an attacker to exploit the password‑recovery mechanism via an alternate path or channel. The flaw permits changing a user’s password without verifying the current password, granting unauthorized access. This issue affects versions from the initial release through 1.2.6. The vulnerability is classified as CWE‑288, directly undermining the integrity of user credentials.

Affected Systems

Affected installations include any version of the Admin Safety Guard plugin from Themepaste dated through 1.2.6. Non‑upgraded installations remain susceptible to the vulnerability.

Risk and Exploitability

The CVSS score of 8.1 indicates high severity. The EPSS score is below 1 % and it does not appear in CISA’s KEV catalog, indicating a low likelihood of widespread exploitation. The likely attack path involves requesting a password‑reset link, capturing or obtaining the reset token, and then using it to set a new password. This path is inferred from the description; the exact method of token acquisition is not detailed in the source. If an attacker can intercept or guess the reset link, account takeover is possible.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Themepaste

Admin Safety Guard

unaffected

Version	Status	Constraints
`0`	affected	≤ 1.2.6

No data.

Vendor Product Versions

Themepaste

Admin Safety Guard

Version	Status	Scheme	Platform
`[0,1.2.6]`	affected	semver	—

Wordpress

Version	Status	Scheme	Platform
`—`	unaffected	—	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Update the Admin Safety Guard plugin to a version newer than 1.2.6.
If an update cannot be applied immediately, disable or remove the plugin to eliminate the vulnerable functionality.
Limit password‑reset attempts or add a CAPTCHA to the reset form to reduce the risk of abuse.
Configure password‑reset tokens to expire quickly and bind them strictly to the intended user account.

Generated by OpenCVE AI on April 29, 2026 at 00:48 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.330% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://patchstack.com/database/Wordpress/Plugin/admin-safety-guard/vulnerability/wordpress-admin-safety-guard-plugin-1-2-2-broken-authentication-vulnerability?_s_id=cve

History

Apr 28, 2026 6:30 PM Description updated. Title updated View changes

Type	Values Removed	Values Added
Description	Authentication Bypass Using an Alternate Path or Channel vulnerability in Themepaste Admin Safety Guard admin-safety-guard allows Password Recovery Exploitation.This issue affects Admin Safety Guard: from n/a through <= 1.2.7.	Authentication Bypass Using an Alternate Path or Channel vulnerability in Themepaste Admin Safety Guard admin-safety-guard allows Password Recovery Exploitation.This issue affects Admin Safety Guard: from n/a through <= 1.2.6.
Title	WordPress Admin Safety Guard plugin <= 1.2.7 - Broken Authentication vulnerability	WordPress Admin Safety Guard plugin <= 1.2.6 - Broken Authentication vulnerability

Apr 23, 2026 3:00 PM Description updated. Title updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description	Authentication Bypass Using an Alternate Path or Channel vulnerability in Themepaste Admin Safety Guard admin-safety-guard allows Password Recovery Exploitation.This issue affects Admin Safety Guard: from n/a through <= 1.2.6.	Authentication Bypass Using an Alternate Path or Channel vulnerability in Themepaste Admin Safety Guard admin-safety-guard allows Password Recovery Exploitation.This issue affects Admin Safety Guard: from n/a through <= 1.2.7.
Title	WordPress Admin Safety Guard plugin <= 1.2.6 - Broken Authentication vulnerability	WordPress Admin Safety Guard plugin <= 1.2.7 - Broken Authentication vulnerability
Metrics		cvssV3_1 `{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

Apr 1, 2026 11:45 PM Description updated. References updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description	Authentication Bypass Using an Alternate Path or Channel vulnerability in Themepaste Admin Safety Guard allows Password Recovery Exploitation.This issue affects Admin Safety Guard: from n/a through 1.2.6.	Authentication Bypass Using an Alternate Path or Channel vulnerability in Themepaste Admin Safety Guard admin-safety-guard allows Password Recovery Exploitation.This issue affects Admin Safety Guard: from n/a through <= 1.2.6.
References	https://patchstack.com/database/wordpress/plugin/admin-safety-guard/vulnerability/wordpress-admin-safety-guard-plugin-1-2-2-broken-authentication-vulnerability?_s_id=cve	https://patchstack.com/database/Wordpress/Plugin/admin-safety-guard/vulnerability/wordpress-admin-safety-guard-plugin-1-2-2-broken-authentication-vulnerability?_s_id=cve
Metrics	cvssV3_1 `{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

Mar 19, 2026 2:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mar 19, 2026 9:45 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Themepaste Themepaste admin Safety Guard Wordpress Wordpress wordpress
Vendors & Products		Themepaste Themepaste admin Safety Guard Wordpress Wordpress wordpress

Mar 19, 2026 7:30 AM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Authentication Bypass Using an Alternate Path or Channel vulnerability in Themepaste Admin Safety Guard allows Password Recovery Exploitation.This issue affects Admin Safety Guard: from n/a through 1.2.6.
Title		WordPress Admin Safety Guard plugin <= 1.2.6 - Broken Authentication vulnerability
Weaknesses		CWE-288
References		https://patchstack.com/database/wordpress/plugin/admin-safety-guard/vulnerability/wordpress-admin-safety-guard-plugin-1-2-2-broken-authentication-vulnerability?_s_id=cve
Metrics		cvssV3_1 `{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'}`