Token Login <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation
Strategic Overview
<= 1.0.3CVE-2024-50488Vulnerability Overview
The Auto Login using a secure tokenized url. Role wise login restriction. plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying if a user has permissions to generate a login token for other users. This makes it possible for authenticated attackers, with subscriber-level access and above, to log in as other using including administrators.
Technical Analysis
REMEDIATION: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement. --- IDENTIFIER: CWE-862 (Missing Authorization) The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C