Xunhuweb Wechat Social Login 微信qq钉钉登录插件
2 CVEs affecting Xunhuweb Wechat Social Login 微信qq钉钉登录插件. Latest disclosed: 2024-10-01. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-9108 | Critical | 9.8 | 2024-10-01 | The Wechat Social login plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'convert_remoteimage_to_lo… |
CVE-2024-9106 | Critical | 9.8 | 2024-10-01 | The Wechat Social login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.3.0. This is due to insufficient verifi… |