CVE-2024-6636: WooCommerce - Social Login <= 2.7.3 - Missing Authorization to Unauthenticated Privilege Escalation
The WooCommerce - Social Login plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wooslgloginemail' function in all versions up to, and including, 2.7.3. This makes it possible for unauthenticated attackers to change the default role to Administrator while registering for an account.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
woocommerce-social-loginto a version that resolves this vulnerability.Fixed in 2.7.3 - Compensating control
Harden WordPress access controls for the affected 'woo_slg_login_email' flow by ensuring capability/authorization checks are enforced for unauthenticated requests before allowing any user-role or account data changes.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6636?
CVE-2024-6636 is classified as a medium severity vulnerability due to its potential for unauthorized data modification.
How do I fix CVE-2024-6636?
To fix CVE-2024-6636, update the WooCommerce - Social Login plugin to version 2.7.4 or later.
Who is affected by CVE-2024-6636?
CVE-2024-6636 affects all versions of the WooCommerce - Social Login plugin up to and including version 2.7.3.
Can CVE-2024-6636 be exploited remotely?
Yes, CVE-2024-6636 can be exploited remotely by unauthenticated attackers.
What is the impact of CVE-2024-6636?
The impact of CVE-2024-6636 includes unauthorized modification of user data, which can compromise user accounts and website integrity.