CVE-2021-24647
Pie Register <= 3.7.1.5 - Authentication Bypass
highImproper Authentication
8.1
CVSS Score
8.1
CVSS Score
high
Severity
3.7.1.6
Patched in
834d
Time to patch
Description
The Registration Forms User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.1.7.6 has a flaw in the social login implementation, allowing unauthenticated attacker to login as any user on the site by only knowing their user ID or username
CVSS Vector Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HAttack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
High
Confidentiality
High
Integrity
High
Availability
Technical Details
Affected versions
<3.7.1.6PublishedOctober 11, 2021
Last updatedJanuary 22, 2024
Affected pluginpie-register
Check if your site is affected.
Run a free security audit to detect vulnerable plugins, outdated versions, and misconfigurations.