CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The OwnID Passwordless Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.3.4. This is due to the plugin not properly checking if the ownid_shared_secret value is empty prior to authenticating a user via JWT. This makes it possible for unauthenticated attackers to log in as other users, including administrators, on instances where the plugin has not been fully configured yet.
Explanation of Vulnerability in Simple Terms
OwnID Passwordless Login versions 1.3.4 and earlier contain an authentication bypass vulnerability. An attacker can gain unauthorized access to user accounts without valid credentials. The vulnerability requires no user interaction and can be exploited remotely over the network. All confidentiality, integrity, and availability protections are compromised.
What an attacker can do
Bypass authentication and gain unauthorized access to user accounts without valid credentials.
Potential impact on your site
Attackers can access any user account, modify data, or disrupt service availability without restriction.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
