CVE-2024-10284

CVE-2024-10284 concerns the CE21 Suite plugin for WordPress. Connected sources confirm an authentication bypass in versions up to 2.2.0 caused by a hardcoded encryption key in the ce21_authentication_phrase function, enabling unauthenticated login as existing users if email access is obtained. Th...