Ringcentral Communications Plugin – Free
Approved changes feed: RSS · Atom
cpe:2.3:a:pbmacintyre:ringcentral_communications_plugin_–_free:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Pbmacintyre (d955c7a0-787f-5d3c-8996-abc5e12e43c9) |
|---|---|
| Product | Ringcentral Communications Plugin – Free (caf9ecee-b2d6-58ab-b52a-5da335e75079) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-7955 |
vulnerable | 2026-06-08 07:45:18.567882 |
RingCentral Communications 1.5 - 1.6.8 - Missing Server‑Side Verification to Authentication Bypass via ringcentral_admin_login_2fa_verify Function
CRITICAL (9.8)
The RingCentral Communications plugin for WordPress is vulnerable to Authentication Bypass due to improper validation within the ringcentral_admin_login_2fa_verify() function in versions 1.5 to 1.6.8. This makes it possible for unauthenticated attackers to log in as any user simply by supplying identical bogus codes.
Published: 2025-08-28T05:24:51.344Z
Updated: 2025-08-28T14:48:48.566Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.