CVE-2023-2704

🗓️ 19 May 2023 02:03:19Reported by WordfenceType

The BP Social Connect plugin for WordPress is vulnerable to authentication bypass up to version 1.5, allowing unauthenticated attackers to log in as any existing user

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2023-2704	19 May 202303:15	–	attackerkb
Circl	CVE-2023-2704	19 May 202307:32	–	circl
CNNVD	WordPress Plugin BP Social Connect 访问控制错误漏洞	19 May 202300:00	–	cnnvd
Cvelist	CVE-2023-2704 BP Social Connect <= 1.5 - Authentication Bypass	19 May 202302:03	–	cvelist
EUVD	EUVD-2023-34168	3 Oct 202520:07	–	euvd
NVD	CVE-2023-2704	19 May 202303:15	–	nvd
Patchstack	WordPress BP Social Connect Plugin <= 1.5 is vulnerable to Broken Access Control	18 May 202300:00	–	patchstack
Prion	Authentication flaw	19 May 202303:15	–	prion
Positive Technologies	PT-2023-20912 · WordPress · Social Connect	19 May 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-2704	23 May 202501:48	–	redhatcve

NVD

Vulners

Node

vibethemes bp_social_connectRange≤1.5wordpress

[
  {
    "vendor": "vibethemes",
    "product": "BP Social Connect",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.5",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/bp-social-connect/tags/1.5/includes/social/facebook/class.facebook.php
lana	www.lana.codes/lanavdb/1bd0dfd9-ffec-4d69-bc55-286751300cab/
plugins	www.plugins.trac.wordpress.org/changeset
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/44c96df2-530a-4ebe-b722-c606a7b135f9
plugins	www.plugins.trac.wordpress.org/browser/bp-social-connect/tags/1.5/includes/social/facebook/class.facebook.php

08 Apr 2026 18:18Current

9.5High risk

Vulners AI Score9.5

CVSS 3.19.8

EPSS0.00394

SSVC

bp social connect wordpress authentication bypass vulnerability nvd cve-2023-2704