CVE-2023-2982
CRITICAL EXPLOITED NUCLEIWordPress Social Login and Register <= 7.6.4 - Authentication Bypass via Insufficient Encryption
Title source: llmExploitation Summary
CVE-2023-2982 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 4 public exploits from researchers including RandomRobbieBF, H4K6, wshinkle. A Nuclei detection template is also available.
AI-analyzed exploit summary This PoC exploits an authentication bypass vulnerability in the WordPress Social Login and Register plugin (CVE-2023-2982) by encrypting and encoding an email address to bypass login validation. It can either test a specific email or crawl the target website for emails using Katana and Nuclei.
Description
The WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4. This is due to insufficient encryption on the user being supplied during a login validated through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they know the email address associated with that user. This was partially patched in version 7.6.4 and fully patched in version 7.6.5.
Exploits (4)
This PoC exploits an authentication bypass vulnerability in the WordPress Social Login and Register plugin (CVE-2023-2982) by encrypting and encoding an email address to bypass login validation. It can either test a specific email or crawl the target website for emails using Katana and Nuclei.
This PoC exploits an authentication bypass vulnerability in WordPress Social Login and Register plugin by encrypting and encoding an email address to bypass login validation. It can either use a provided email or crawl the target website for emails using Katana and Nuclei.
This PoC exploits CVE-2023-2982 by encoding email and app name using AES-ECB encryption and sending them to a target host to bypass authentication. It checks for WordPress cookies in the response to confirm successful exploitation.
This PoC exploits CVE-2023-2982, an authentication bypass vulnerability in miniOrange's Social Login and Register plugin for WordPress. It automates the login process by encrypting and encoding email addresses, then attempting to authenticate via a crafted POST request.
Nuclei Templates (1)
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H