CVE-2024-9106

CVE-2024-9106 Wechat Social login = 1.3.0 - Omisión de autenticación Descripción: El plugin Wechat Social login para WordPress es vulnerable a omisión de autenticación en versiones hasta la 1.3.0 inclusive. Esto se debe a una verificación insuficiente del usuario suministrado durante el inicio de...

EUVD-2024-49734

Malicious code in bioql PyPI...

CVE-2024-9106

The Wechat Social login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.3.0. This is due to insufficient verification on the user being supplied during the social login. This makes it possible for unauthenticated attackers to log in as any existing...

CVE-2024-9108

The Wechat Social login plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'convertremoteimagetolocal' function in versions up to, and including, 1.3.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the...

CVE-2024-9106

The Wechat Social login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.3.0. This is due to insufficient verification on the user being supplied during the social login. This makes it possible for unauthenticated attackers to log in as any existing...

CVE-2024-9106

CVE-2024-9106 concerns the WordPress plugin Wechat Social login (

WordPress Wechat Social login plugin <= 1.3.0 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by István Márton in WordPress Plugin Wechat Social login versions = 1.3.0...

WordPress Wechat Social login plugin <= 1.3.0 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by István Márton in WordPress Plugin Wechat Social login versions = 1.3.0...

WordPress Wechat Social login Plugin <= 1.3.0 is vulnerable to Broken Authentication

Software Wechat Social login Type Plugin Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-9106 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 26efb59ee707 Credits Istvá...

WordPress plugin Wechat Social login 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

PT-2024-39434 · WordPress · Wechat Social Login Plugin

Name of the Vulnerable Software and Affected Versions: Wechat Social login plugin for WordPress versions up to, and including, 1.3.0 Description: The issue is due to insufficient verification on the user being supplied during the social login, making it possible for unauthenticated attackers to l...