Zm Ajax Login & Register Project

zm_ajax_login_&_register_project

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Zm Ajax Login & Register

zm_ajax_login_&_register

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-2027 1Zm Ajax Login & Register Project 1Zm Ajax Login & Register Jun 17, 2026 Apr 15, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 The ZM Ajax Login & Register plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.2. This is due to insufficient verification on the user being supplied during a Facebook logi...Show more The ZM Ajax Login & Register plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.2. This is due to insufficient verification on the user being supplied during a Facebook login through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2023-2027

1Zm Ajax Login & Register Project

1Zm Ajax Login & Register

Jun 17, 2026

Apr 15, 2023

N/A· v4

9.8 CRITICAL· v3

N/A· v2

The ZM Ajax Login & Register plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.2. This is due to insufficient verification on the user being supplied during a Facebook login through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username.Show less