CVE-2023-2982

This PoC exploits an authentication bypass vulnerability in the WordPress Social Login and Register plugin (CVE-2023-2982) by encrypting and encoding an email address to bypass login validation. It can either test a specific email or crawl the target website for emails using Katana and Nuclei.

This PoC exploits an authentication bypass vulnerability in WordPress Social Login and Register plugin by encrypting and encoding an email address to bypass login validation. It can either use a provided email or crawl the target website for emails using Katana and Nuclei.

This PoC exploits CVE-2023-2982, an authentication bypass vulnerability in miniOrange's Social Login and Register plugin for WordPress. It automates the login process by encrypting and encoding email addresses, then attempting to authenticate via a crafted POST request.

This PoC exploits CVE-2023-2982 by encoding email and app name using AES-ECB encryption and sending them to a target host to bypass authentication. It checks for WordPress cookies in the response to confirm successful exploitation.