Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101687
HistoryDec 19, 2021 - 12:00 a.m.

WordPress RegistrationMagic plugin authorization problem vulnerability

2021-12-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
3

0.003 Low

EPSS

Percentile

71.5%

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. registrationMagic plugin is a WordPress open source application plugin. the WordPress RegistrationMagic plugin has an authorization problem vulnerability that stems from the social login function social_login_ using_email() is missing authentication. An unauthenticated attacker could use this vulnerability to be able to log in as any site user (including administrators).

0.003 Low

EPSS

Percentile

71.5%