Authentication vulnerability in Heateor Social Login WordPress 1.1.35

The Heateor Social Login WordPress plugin is currently at risk of being accessed by unauthorized users. This is because the plugin does not properly verify the user who is returning with the social login token. This means that if someone has access to a user’s email and that user does not have an account for the service being used, they can log in as that user on the website. This does not apply to administrator accounts by default, but if the plugin has been set up to allow administrators to use social login, their accounts are also at risk.