June 30, 2023, 4:03 a.m. | Pierluigi Paganini

Security Affairs securityaffairs.co

A critical authentication bypass flaw in miniOrange’s WordPress Social Login and Register plugin, can allow gaining access to any account on a site. Wordfence researchers discovered an authentication bypass vulnerability in miniOrange’s WordPress Social Login and Register plugin, that can allow an unauthenticated attacker to gain access to any account on a site by knowing the associated email […]


The post miniOrange’s WordPress Social Login and Register plugin was affected by a critical auth bypass bug appeared first on Security …

access account auth authentication authentication bypass authentication bypass flaw breaking news bug bypass critical flaw hacking information security news it information security login pierluigi paganini plugin register researchers social vulnerability wordfence wordpress

More from securityaffairs.co / Security Affairs

Information Security Engineers

@ D. E. Shaw Research | New York City

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA

COMM Penetration Tester (PenTest-2), Chantilly, VA OS&CI Job #368

@ Allen Integrated Solutions | Chantilly, Virginia, United States

Consultant Sécurité SI H/F Gouvernance - Risques - Conformité

@ Hifield | Sèvres, France

Infrastructure Consultant

@ Telefonica Tech | Belfast, United Kingdom