Authentication vulnerability in Workreap 3.2.5

The Workreap plugin, which is used on WordPress websites, has a security vulnerability that allows people to gain access to other user’s accounts. This can happen when someone uses a social media account to login or when they update their profile information, like their password. Attackers who are not logged in can use this vulnerability to login as any user if they know their email address, or change the password of any user, including administrators. This can give them access to the user’s account. Please note that this vulnerability was partially fixed in version 3.2.5.