← WordPress Vulnerabilities
WordPress security by component

Swoop Password Free Authentication

Swoop Password Free Authentication enables password-free user authentication through the Swoop service.

Swoop Password Free Authentication (swoop-password-free-authentication) is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published Oct 28, 2024; the highest published CVSS base score is 9.8.

Plugin slug: swoop-password-free-authentication

CVE-2024-50478: Swoop Password Free Authentication: Privilege escalation or authentication bypass

Swoop Password Free Authentication is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.

PublishedOct 28, 2024
Safe version guidanceSee mitigation notes
Published vulnerabilities for swoop-password-free-authentication
Safe version
Oct 28, 2024 CVE-2024-50478
Swoop Password Free Authentication: Privilege escalation or authentication bypass
Swoop Password Free Authentication is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
See mitigation notes
CVE9.8