Description
The Descope WordPress plugin before 1.2.0 does not validate the authentication token it receives before creating a WordPress session, accepting any non-empty token, so an unauthenticated attacker can obtain a session for any existing account, including an administrator, by supplying that account's email address.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Descope | < 1.2.0 | 1.2.0 |
References
- https://wpscan.com/vulnerability/8b97f139-cbc3-4913-b69a-a3179f4cc264/ exploit vdb-entry technical-description