WordPress plugin vulnerability puts user accounts at risk

More than 30,000 WordPress sites using miniOrange's Social Login and Register plugin could have their user accounts exposed with the exploitation of a critical authentication bypass vulnerability, tracked as CVE-2023-2982.

accounts authentication authentication bypass bypass critical cve exploitation exposed login plugin plugin vulnerability register risk social threat intelligence vulnerability wordpress wordpress plugin