Unauthenticated Attackers Can Log in as Any Existing User on the Site Due to Insufficient Verification in Social Login Lite For WooCommerce Plugin

CVE-2024-4552

What is CVE-2024-4552?

The Social Login Lite For WooCommerce plugin for WordPress is affected by a significant security vulnerability that allows unauthenticated attackers to bypass authentication mechanisms. This flaw, present in versions up to and including 1.6.0, results from inadequate user verification during the social login process. As a result, attackers with access to a user's email can gain unauthorized access to that account, potentially allowing them to assume control over any existing user account on the site, including those with administrative privileges. Site administrators using this plugin are at heightened risk and are urged to implement protective measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References