cbcvebase.

Tarecord Sign In With Google vulnerabilities

1 known vulnerability affecting tarecord/sign_in_with_google.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2024-11015P1CRITICALCVSS 9.8Exploited≤ 1.8.02024-12-12
CVE-2024-11015 [CRITICAL] CWE-287 CVE-2024-11015: The Sign In With Google plugin for WordPress is vulnerable to authentication bypass in all versions The Sign In With Google plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.8.0. This is due to the 'authenticate_user' user function not implementing sufficient null value checks when setting the access token and user information. This makes it possible for unauthenticated attackers to log in as the
nvd
Tarecord Sign In With Google vulnerabilities | cvebase