The tagDiv Composer WordPress plugin prior to 3.5, required by the Newspaper WordPress theme prior to 12.1 and Newsmag WordPress theme prior to 5.2.2, does not properly implement the Facebook login feature, allowing unauthenticated malicious users to login as any user by just knowing their email address
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
tagdiv composer project tagdiv composer |
||
newsmag project newsmag |
||
newspaper project newspaper |
Vulmon