Authentication vulnerability in Nextend Social Login Pro 3.1.14

The Nextend Social Login Pro plugin for WordPress has a security issue that allows unauthorized users to log in as any existing user on the site. This is because the plugin does not properly verify the user who is trying to log in through a social media account. This means that anyone who has access to the email associated with an existing user account can gain access to the site, even if they are not the actual user. This vulnerability exists in all versions of the plugin up to and including version 3.1.14.

Detected in:

Nextend Social Login Pro fixed vulnerable versions: >= * <= 3.1.14

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.