Skip to content
OpenAdvisories

Vendor

xunhuweb

2 known vulnerabilities.

Products

Wechat Social login 微信QQ钉钉登录插件 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-9106 Public exploit

    Wechat Social login <= 1.3.0 - Authentication Bypass

    The Wechat Social login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.3.0. This is due to insufficient verification on the user being supplied during the social login. This makes it possible for unauthenticate…

    xunhuweb Wechat Social login 微信QQ钉钉登录插件 Web / CMS
  • Critical 9.8
    CVE-2024-9108

    Wechat Social login <= 1.3.0 - Unauthenticated Arbitrary File Upload

    The Wechat Social login plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'convert_remoteimage_to_local' function in versions up to, and including, 1.3.0. This makes it possible for unauthenticated at…

    xunhuweb Wechat Social login 微信QQ钉钉登录插件 Web / CMS