CVE-2024-1763 is a missing authorization vulnerability in the roxnor Wp Social Login and Register Social Counter WordPress plugin. The issue arises because the /wp_social/v1/ REST API endpoint does not perform a capability check, allowing unauthenticated users to modify social login provider settings. This could lead to unauthorized changes in the plugin's configuration, potentially impacting site functionality related to social login and sharing features. The vulnerability affects all versions up to and including 3.0.0.

An unauthenticated attacker can enable or disable certain social login providers without authorization. This unauthorized modification may disrupt normal social login and sharing operations on affected WordPress sites. The confidentiality and integrity of the plugin's configuration data are impacted, but there is no indication of availability impact or direct data disclosure beyond configuration changes.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the REST API endpoint or implementing additional access controls at the web server or application level to prevent unauthorized modification. Monitor vendor channels for updates and apply patches promptly once available.