CVE-2024-50478

CVE-2024-50478 1-Click Login: Passwordless Authentication 1.4.5 - 认证绕过通过账户接管 描述: WordPress 的 1-Click Login: Passwordless Authentication 插件在 1.4.5 版本中存在认证绕过漏洞。这是由于插件在认证用户之前未正确验证用户身份。这使得未经身份验证的攻击者能够以其他用户（例如管理员）的身份登录，前提是他们拥有访问电子邮件的权限。 root@kitploit: CVE: CVE-2024-50478 CVSS:...

CVE-2024-50478 WordPress 1-Click Login: Passwordless Authentication plugin 1.4.5 - Broken Authentication vulnerability

Authentication Bypass by Primary Weakness vulnerability in Swoop 1-Click Login: Passwordless Authentication allows Authentication Bypass.This issue affects 1-Click Login: Passwordless Authentication: 1.4.5...

WordPress 1-Click Login: Passwordless Authentication Plugin 1.4.5 is vulnerable to Broken Authentication

Software 1-Click Login: Passwordless Authentication Type Plugin Vulnerable versions 1.4.5 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Broken Authentication CVE CVE-2024-50478 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 2b1c10f4ccc7 Credits...