Skip to content
OpenAdvisories
Critical · 9.8 Public exploit CVE-2024-50478 EUVD-2024-44904GHSA-6h38-5xh4-ghc6

WordPress 1-Click Login: Passwordless Authentication plugin 1.4.5 - Broken Authentication vulnerability

Published Oct 28, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authentication Bypass by Primary Weakness vulnerability in Swoop 1-Click Login: Passwordless Authentication allows Authentication Bypass.This issue affects 1-Click Login: Passwordless Authentication: 1.4.5.

Affected products

VendorProductAffectedFixed
Swoop 1-Click Login: Passwordless Authentication 1.4.5 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • RandomRobbieBF/CVE-2024-50478 ★ 0 · Nov 5, 2024

    1-Click Login: Passwordless Authentication 1.4.5 - Authentication Bypass via Account Takeover

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References