@offseq.bsky.social on Bluesky

Post

OffSequence

offseq.bsky.social

did:plc:t5t6qep2vfipbi7f54demwev

Qode Membership plugin (≤2.0.6.2) hit by CRITICAL auth bypass (CVE-2026-92885, CVSS 9.8). Unauthenticated attackers can take over admin accounts. Remove or restrict plugin ASAP. https://radar.offseq.com/threat/cve-2026-92885-cwe-287-improper-authentication-in-qode-themes-qode-membership-038e4dcfe... https://radar.offseq.com/threat/cve-2026-92885-cwe-287-improper-authentication-in-qode-themes-qode-membership-038e4dcfed22c95b

2026-10-27T09:00:27.478Z

Enable JavaScript to use Bluesky.

Learn more about Bluesky at bsky.social and atproto.com.