Beveiligingsadvies

CVE-2024-6635

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-07-20 07:38:03

Laatst bijgewerkt 2026-04-08 16:46:23

Toegewezen door Wordfence

CVSS-score 7.3

Status PUBLISHED

Beschrijving

The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.3. This is due to insufficient controls in the 'woo_slg_login_email' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, excluding an administrator, if they know the email of user.

← Alle CVE's bekijken Bekijk op cve.org ↗