Unknown Login & Register Forms

• CVE-2026-18470 High 7.5 Login & Register Forms < 4.0.2 - Unauthenticated Registered User Email Address Disclosure via Lost Password Response 0.4%
• CVE-2026-18469 High 8.1 Login & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Code Brute Force 0.4%
• CVE-2026-18468 High 8.1 Login & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Verification State Keyed on a Client-Supplied Address Header 0.4%
• CVE-2026-14836 High 8.1 Login/Signup Popup < 3.2.5 - Unauthenticated Account Takeover via Password Reset Rate Limit Bypass 0.4%