CS Money · Report #2269989
Authentication Bypass to (CVE-2023-2982)
Validstatus
lowseverity
$100bounty
74upvotes
8 Dec 2023disclosed
Summary
An older version of the WordPress plugin WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) was in use, which was vulnerable to authentication bypass in cs.money blog.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.