A vulnerability marked as critical has been reported in AAM Plugin Advanced Access Manager Plugin up to 7.1.0 on WordPress. Affected is an unknown function. Performing a manipulation results in authentication bypass by spoofing. This vulnerability is reported as CVE-2026-42674 . The attack is possible to be carried out remotely. No exploit exists.