Authentication vulnerability in Bravis User 1.0.0

The Bravis User plugin for WordPress has a security issue that allows unauthorized access to administrative accounts. This vulnerability exists in all versions up to and including 1.0.0. The problem lies in the plugin not properly verifying user data through the facebook_ajax_login_callback() function. This means that attackers without valid credentials can log in as administrative users, as long as they have an existing account on the site and know the email of an administrative user.