Lucene search
+L
Swoopnow1-click Login: Passwordless Authentication

1 matches found

CVE
CVE
added 2024/10/28 12:32 p.m.66 views

CVE-2024-50478

CVE-2024-50478 (WordPress 1-Click Login: Passwordless Authentication plugin, v1.4.5) exists as an Authentication Bypass via a primary weakness. The public Exploit for CVE-2024-50478 demonstrates unauthenticated token-based login bypass to impersonate another user (e.g., admin) using a crafted JWT...

9.8CVSS5.2AI score0.01123EPSS
SaveWeb