Really Simple Security logo

Log out
Get PRO

Latest

Authentication vulnerability in Social Login 5.9.0

  • Severity: critical
  • Status: Fixed
  • Publication: November 22, 2024

The Social Login plugin for WordPress has a security issue that allows unauthorized users to log in as any existing user on the site, including administrators. This vulnerability exists in all versions up to 5.9.0 and is caused by not properly verifying the user who is returned by the social login token. This means that if an attacker has access to the email associated with a user’s account and that user has not already linked their account with the social login service, the attacker can gain access to their account.

Detected in:

Social Login fixed vulnerable versions: >= * <= 5.9.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.