Wisdmlabs Edwiser Bridge Wordpress Moodle Integration vulnerabilities

CVE-2024-4186 [CRITICAL] CWE-288 CVE-2024-4186: The Edwiser Bridge plugin for WordPress is vulnerable to authentication bypass in versions up to, an The Edwiser Bridge plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.0.5. This is due to the 'eb_user_email_verification_key' default value is empty, and the not empty check is missing in the 'eb_user_email_verify' function. This makes it possible for unauthenticated attackers to log in as any existing u

CVE-2021-4399 [HIGH] CWE-352 CVE-2021-4399: The Edwiser Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up t The Edwiser Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,2.0.6. This is due to missing or incorrect nonce validation on the user_data_synchronization_initiater(), course_synchronization_initiater(), users_link_to_moodle_synchronization(), connection_test_initiater(), admin_menus(), and subscrib