Threats tagged 'ghsa-gj32-ffvm-frj6'

The WPCOM Member WordPress plugin contains an authentication bypass vulnerability in all versions up to and including 1.7.27. This flaw allows unauthenticated attackers to log in as any WordPress user, including administrators, by exploiting the social-login callback handler. The vulnerability arises from missing nonce validation, OAuth state verification, and session namespace isolation, enabling attackers to forge session entries and impersonate users if they know or can enumerate the victim's social provider identifier. Exploitation requires the target site to have at least one social provider configured.