CVE-2021-24647CWE-287

Pie Register < 3.7.1.6 - Unauthenticated Arbitrary Login

published November 8, 2021

CVSS
—
EPSS
10%
Percentile
95.6
In the wild
Unconfirmed
What it is

The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.1.7.6 has a flaw in the social login implementation, allowing unauthenticated attacker to login as any user on the site by only knowing their user ID or username

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09830 · 95.6th percentile
Weakness
CWE-287 · Improper Authentication
Published
2021-11-08T17:34Z
EPSS history
Timeline
  • 08 NOV 17:34Z
    Pie Register < 3.7.1.6 - Unauthenticated Arbitrary Login
    cvelistv5