The Pie Register - Social Sites Login (Add on) plugin for WordPress contains an authentication bypass vulnerability (CWE-288) in versions up to 1.7.7. This occurs because the plugin does not sufficiently verify the identity of users during social login processes. An attacker who knows a valid user's email can exploit this to authenticate as that user without proper credentials. The vulnerability has a CVSS 3.1 base score of 9.8, reflecting network attack vector, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official remediation has been published yet, and the plugin is not a cloud service, so remediation depends on vendor updates or user action.

Successful exploitation allows an unauthenticated attacker to bypass authentication controls and log in as any existing user on the WordPress site, including administrators. This can lead to complete site compromise, unauthorized data access, modification, and potential site disruption. The high CVSS score (9.8) reflects the critical nature of this impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider disabling the affected plugin or restricting access to social login features. Monitor official Genetech Solutions communications for updates on patches or mitigations.