Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m3fm-fqwr-692p

Опубликовано: 15 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The WooCommerce - Social Login plugin for WordPress is vulnerable to Email Verification in all versions up to, and including, 2.6.2 via the use of insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the email verification.

The WooCommerce - Social Login plugin for WordPress is vulnerable to Email Verification in all versions up to, and including, 2.6.2 via the use of insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the email verification.

EPSS

Процентиль: 33%
0.00128
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
nvd
больше 1 года назад

The WooCommerce - Social Login plugin for WordPress is vulnerable to Email Verification in all versions up to, and including, 2.6.2 via the use of insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the email verification.

EPSS

Процентиль: 33%
0.00128
Низкий

6.5 Medium

CVSS3