Description
The Swipe WordPress plugin through 1.4 does not properly authenticate a login request before issuing a WordPress session cookie, allowing unauthenticated attackers to log in as an existing user, including an administrator, when that user has an active app session.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Swipe | 0 ≤1.4 | — |