{"vulnerability": "cve-2026-77002", "sightings": [{"uuid": "e30a399c-1dfe-4fd1-8e6d-4c1bd72c8984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77002", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117137986193455712", "content": "CRITICAL: CVE-2026-77002 in SmilePass Selfie Login WP plugin (\u22641.0.2) allows full account takeover \u2014 no auth needed. Remove/disable plugin until patched. Details: https://radar.offseq.com/threat/cve-2026-77002-cwe-287-improper-authentication-in-smilepass-selfie-login-581c897a80f66e83 #OffSeq #WordPress #Vuln #CVE202677002", "creation_timestamp": "2026-08-22T07:30:23.261960Z"}, {"uuid": "d26947b8-1e8d-4b5d-a7f8-4a0df9911706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77002", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtnqwyfch424", "content": "SmilePass Selfie Login WP plugin (\u22641.0.2) has a CRITICAL flaw: attackers can bypass authentication and access any account. Remove or disable plugin until a fix is released. https://radar.offseq.com/threat/cve-2026-77002-cwe-287-improper-authentication-in-smilepass-selfie-login-581c897a80f66e83 #O...", "creation_timestamp": "2026-08-22T07:30:25.144677Z"}, {"uuid": "d422fe4a-5550-45e4-ba96-455a3c4e089d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77002", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtra4rtgo72p", "content": "CVE-2026-77002 - smilepass selfie login\nThe WordPress SmilePass Selfie Login add\u2011on (up to version 1.0.2) does not check who is actually trying to log in. Because of this, anyone can sign in as any existing user,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-08-23T16:40:04.322894Z"}, {"uuid": "d1c96692-2933-4235-9ca5-fadec9c98a3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77002", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtrenb63tt2o", "content": "\ud83d\udd34 CVE-2026-77002 - Critical (9.8)\n\nThe SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verifi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77002/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T18:00:52.751957Z"}]}