CVE-2023-2499

Name of the Vulnerable Software and Affected Versions RegistrationMagic plugin for WordPress versions up to, and including, 5.2.1.0

Description The issue is related to authentication bypass due to insufficient verification during a Google social login. This allows unauthenticated attackers to log in as any existing user, including administrators, if they have access to the email.

Recommendations For versions up to, and including, 5.2.1.0, update to a version that includes the necessary verification for Google social login to prevent authentication bypass.