Exploit for Authentication Bypass Using an Alternate Path or Channel in Priyabratasarkar Token_Login

CVE-2024-50488 Token Login = 1.0.3 - Authenticated Subscr...

CVE-2024-50488

CVE-2024-50488: Token Login for WordPress (Priyabrata Sarkar) up to version 1.0.3 suffers an authentication bypass via an alternate path/channel. Affected plugin is Token Login; impact is high (attacker with subscriber privileges can log in as other users). Public references corroborate a broken ...

WordPress Token Login Plugin <= 1.0.3 is vulnerable to Broken Authentication

Software Token Login Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-50488 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 18531b1d1720 Credits stealthcopte...