Social Login <= 5.9.0 - Authentication Bypass

CVE-2024-10961

What is CVE-2024-10961?

The Social Login plugin for WordPress contains a security vulnerability that enables authentication bypass, affecting all versions through 5.9.0. The flaw arises from inadequate verification processes related to the user identified by the social login token. As a result, unauthorized attackers can gain access to any user account, including those with elevated privileges, such as administrators, provided they have the associated email address and that the user does not already possess an account for the service that provides the token. This vulnerability poses significant security risks for websites using this plugin, as it undermines the integrity of user authentication.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References