Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-zxhx-u8vp-aba5 |
|---|
| Summary | The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.3. This is due to insufficient controls in the 'woo_slg_login_email' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, excluding an administrator, if they know the email of user. |
|---|
| Aliases |
|
|---|
| Fixed_packages |
|
|---|
| Affected_packages |
|
|---|
| References |
|
|---|
| Weaknesses |
| 0 |
| cwe_id |
288 |
| name |
Authentication Bypass Using an Alternate Path or Channel |
| description |
A product requires authentication, but the product has an alternate path or channel that does not require authentication. |
|
|
|---|
| Exploits |
|
|---|
| Severity_range_score | 7.3 - 7.3 |
|---|
| Exploitability | null |
|---|
| Weighted_severity | null |
|---|
| Risk_score | null |
|---|
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-zxhx-u8vp-aba5 |
|---|