The vulnerability identified as CVE-2024-50478 affects the swoopbrandon 1-Click Login: Passwordless Authentication plugin (up to version 1.4.5). It allows an attacker to bypass authentication mechanisms due to a primary weakness in the authentication process. The issue requires no privileges and no user interaction, making it remotely exploitable over the network. The CVSS 3.1 base score is 9.8, reflecting critical impact on confidentiality, integrity, and availability. As of the published date, no patch or official remediation has been disclosed by the vendor.

Successful exploitation of this vulnerability enables an attacker to bypass authentication controls, potentially gaining unauthorized access to user accounts or administrative functions. This compromises the confidentiality, integrity, and availability of the affected system. Given the critical CVSS score, the impact is severe and could lead to full system compromise if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider disabling or removing the affected plugin to prevent exploitation. Monitor vendor communications for updates on patches or mitigations.