Unauthenticated Attackers Can Bypass Authentication in WooCommerce Social Login Plugin

CVE-2024-6635

What is CVE-2024-6635?

The WooCommerce - Social Login plugin for WordPress features a significant security vulnerability that affects versions up to and including 2.7.3. This flaw arises from inadequate validation mechanisms within the 'woo_slg_login_email' function, allowing unauthenticated attackers to successfully log in as any existing user, aside from administrators, simply by knowing the respective user's email address. The exploit poses a considerable risk to user privacy and overall site integrity, emphasizing the need for immediate patches and security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References