Authentication vulnerability in 1 click passwordless login, temporary login, social login & user switching – Login Me Now 1.7.2

The Login Me Now plugin for WordPress has a security issue that allows attackers to bypass the login process and access the site as an existing user, including administrators. This vulnerability is caused by a weakness in the way the plugin handles authentication, specifically in the ‘AutoLogin::listen()’ function. However, this vulnerability can only be exploited if the attacker has access to specific information from another software.