PT-2023-19852
CVE-2023-2499
·
تاريخ النشر
2023-05-16
·
تاريخ التحديث
2023-05-22
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
RegistrationMagic plugin for WordPress versions up to, and including, 5.2.1.0
Description
The issue is related to authentication bypass due to insufficient verification during a Google social login. This allows unauthenticated attackers to log in as any existing user, including administrators, if they have access to the email.
Recommendations
For versions up to, and including, 5.2.1.0, update to a version that includes the necessary verification for Google social login to prevent authentication bypass.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾