Authentication vulnerability in Wp Social Login and Register Social Counter 3.0.7

The Wp Social Login and Register Social Counter plugin for WordPress has a security issue that allows unauthorized access to user accounts. This happens because the plugin does not properly check the user’s identity when they use a social login token. As a result, attackers without an account can log in as any existing user on the site, including administrators, if they know the user’s email and the service used for the login.