Authentication vulnerability in Comments – wpDiscuz 7.6.24

The Comments – wpDiscuz plugin for WordPress has a security issue that affects all versions up to 7.6.24. This is because the plugin does not properly check the user who is using a social login token. This means that people who are not logged in can pretend to be any user on the website, even an administrator, if they know the user’s email and the user does not already have an account for that social media service.