Description (CNA)
The WooCommerce - Social Login plugin for WordPress is vulnerable to Email Verification in all versions up to, and including, 2.6.2 via the use of insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the email verification.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| WPWeb / WooCommerce - Social Login | affected 0 through 2.6.2 |
CWE
CWE-330
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/97fbbf5b-d3c7-47ce-b251-ce1fe38af152?source=cve
- https://codecanyon.net/item/social-login-wordpress-woocommerce-plugin/8495883
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.