WordPress Plugin WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Security Bypass (7.6.4)
Description
WordPress Plugin WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently log in as any existing user on the site, including administrator, if they know the email address. WordPress Plugin WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) version 7.6.4 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 7.6.5 or latest