CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn): from n/a through 7.6.0.
Explanation of Vulnerability in Simple Terms
The WordPress Social Login and Register plugin through version 7.6.0 does not properly check user permissions before allowing certain actions. An unauthenticated attacker can exploit this to disrupt the site's availability. The vulnerability requires no user interaction and can be triggered remotely over the network.
What an attacker can do
Disrupt the site's availability without authentication.
Potential impact on your site
Site availability may be degraded or interrupted by unauthenticated remote requests.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
