PT-2023-3468 · WordPress · Wordpress Social Login/Register

István Márton + 1 · Published 2023-05-27 · Updated 2023-12-08 · CVE-2023-2982

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WordPress Social Login and Register plugin versions up to and including 7.6.4

Description The issue is related to an authentication bypass in the WordPress Social Login and Register plugin. This is due to insufficient encryption on the user being supplied during a login validated through the plugin. It makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they know the email address associated with that user.

Recommendations For versions up to and including 7.6.4, update to version 7.6.5 to fully patch the issue. As a temporary workaround, consider restricting access to the login functionality until the update is applied.

Exploit

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

BDU:2023-03654

CVE-2023-2982

Affected Products

Wordpress Social Login/Register

References · 15

• 🔥 https://github.com/RandomRobbieBF/CVE-2023-2982 · Exploit
• 🔥 https://github.com/H4K6/CVE-2023-2982-POC · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-2982 · Security Note
• https://bdu.fstec.ru/vul/2023-03654 · Security Note
• https://osv.dev/vulnerability/CVE-2023-2982 · Vendor Advisory
• https://lana.codes/lanavdb/2326f41f-a39f-4fde-8627-9d29fff91443 · Note
• https://plugins.trac.wordpress.org/changeset/2924863/miniorange-login-openid · Note
• https://t.me/proxy_bar/1600 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/08ca186a-2486-4a58-9c53-03e9eba13e66?source=cve · Note
• https://vuldb.com/ru/?id.232541 · Note
• https://t.me/cvenotify/53275 · Telegram Post
• https://plugins.trac.wordpress.org/changeset/2925914/miniorange-login-openid · Note
• https://plugins.trac.wordpress.org/browser/miniorange-login-openid/trunk/mo-openid-social-login-functions.php#L107 · Note
• https://t.me/cybersecuritytechnologies/8602 · Telegram Post
• https://t.me/defcon_news/120368 · Telegram Post