NVD CRITICAL: CVE-2026-5229 — The Form Notify plugin for WordPress is vulnerable to Authentication Bypass in v...
The Form Notify plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.1.10. This is due to the plugin trusting user-controlled cookie data to determine which WordPress account to authenticate after a LINE OAuth login. When LINE doesn't provide an email address (which is common), the plugin falls back to reading the 'form_notify_line_email' cookie value witho
CVE-2026-5229