Description Insufficient state checks lead to a vector that allows to bypass 2FA checks. Remediation References CVE-2026-48896 Related Vulnerabilities WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Unspecified Vulnerability (1.14.9) WordPress Plugin Delete All Comments Arbitrary File Upload (2.0) Jetty Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2009-5047) WordPress Plugin Z-URL Preview Cross-Site Scripting (1.6.2) WordPress Plugin WP Visitor Statistics (Real Time Traffic) SQL Injection (6.8.1) Severity High Classification CVE-2026-48896 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Tags Missing Update Known Vulnerabilities