Unauthenticated Attackers Can Log in as Any Existing User on the Site

CVE-2024-5432

Summary

The Lifeline Donation plugin for WordPress is susceptible to an authentication bypass issue due to inadequate user verification during the checkout process. This vulnerability allows unauthenticated attackers to gain access as any existing user on the WordPress site, including users with administrative privileges, provided they know the email associated with the account. It highlights a significant security risk as it can lead to unauthorized actions on the site, potentially compromising sensitive user data and overall site integrity.

References