← Back

Pedalo

pedalo

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Pedalo Connector
pedalo_connector
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-9822
1Pedalo
1Pedalo Connector
Jun 17, 2026
Oct 11, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The Pedalo Connector plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.5. This is due to insufficient restriction on the 'login_admin_user' function. This makes it possible...Show more
The Pedalo Connector plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.5. This is due to insufficient restriction on the 'login_admin_user' function. This makes it possible for unauthenticated attackers to log to the first user, who is usually the administrator, or if it does not exist, then to the first administrator.Show less