Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Social Sites Login <= 1.7.9 - Authentication Bypass via WordPress.com OAuth provider
high
The Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Social Sites Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.7.9. This is due to insufficient verification on the user bei...
- CVSS:
- 8.1
- Affected:
- up to 1.7.9
- Fixed in:
- 1.8
- Disclosed:
- Dec 3, 2024
CVE-2024-11293 on NVD →
Pie Register - Social Sites Login (Add on) <= 1.7.7 - Authentication Bypass
critical
The Pie Register - Social Sites Login (Add on) plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.7. This is due to insufficient verification on the user being supplied during a social login through the plugin. This makes it possible for unauthenticated attackers to log in...
- CVSS:
- 9.8
- Affected:
- up to 1.7.7
- Fixed in:
- 1.7.8
- Disclosed:
- May 23, 2024
CVE-2024-4544 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database