WP Social Media Login Plugin Authentication Bypass Vulnerability

Executive Summary

This vulnerability affects the WP Social Media Login WordPress plugin up to version 1.0.6. It allows unauthenticated attackers to log in as any existing user, including administrators, by supplying that user's email address. The plugin fails to verify if a social login was completed with the identity provider before authenticating a visitor.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if the WP Social Media Login plugin version 1.0.6 or lower is installed on your WordPress site. Verify if the plugin fails to validate social login completions before authenticating users. Inspect login logs for unauthorized access attempts or unexpected account creations.

Useful 0 Not Useful 0

Impact Analysis

Attackers can take over any existing user account, including administrator accounts, by exploiting the Twitter login flow. If the email does not match an existing account, a new account is created, and the attacker is automatically signed in, regardless of registration settings. This only impacts single-site WordPress installations.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to user accounts, potentially exposing personal data. For GDPR, this may violate principles of data protection and user consent. For HIPAA, unauthorized access to health-related data could breach confidentiality requirements.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately disable the WP Social Media Login plugin if installed. Update to the latest version if a patch becomes available. Implement additional authentication layers for admin accounts. Monitor user accounts for unauthorized access or new account creations.

Useful 0 Not Useful 0