Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2024-9106 — AI Deep Analysis Summary

CVSS 9.8 · Critical

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: Critical Auth Bypass in Wechat Social Login plugin. <br>💥 **Consequences**: Attackers can log in as ANY user (even Admins) without passwords. Total site compromise possible.

Q2Root Cause? (CWE/Flaw)

🛡️ **CWE-288**: Authentication Bypass. <br>🔍 **Flaw**: Insufficient verification of the user ID during social login. The system trusts the supplied `uid` without checking if it matches the authenticated session.

Q3Who is affected? (Versions/Components)

📦 **Vendor**: xunhuweb. <br>📉 **Affected**: Wechat Social login plugin versions **≤ 1.3.0**. <br>🌐 **Platform**: WordPress sites using this specific plugin.

Q4What can hackers do? (Privileges/Data)

👑 **Privileges**: Full Admin access if `uid=1` (or admin ID) is known. <br>📂 **Data**: Complete read/write access to the WordPress site. <br>🔓 **Identity**: Impersonate ANY existing user.

Q5Is exploitation threshold high? (Auth/Config)

⚠️ **Threshold**: LOW. <br>🔑 **Auth**: None required (Unauthenticated). <br>⚙️ **Config**: Exploitable ONLY if the App Secret is NOT set (default empty value). If secret is set, this specific bypass may be blocked.

Q6Is there a public Exp? (PoC/Wild Exploitation)

🔓 **Exploit**: YES. Public PoC available on GitHub (RandomRobbieBF). <br>🌍 **Status**: Active exploitation possible. Simple script to swap `uid` parameter.

Q7How to self-check? (Features/Scanning)

🔍 **Check**: Scan for plugin version **1.3.0 or lower**. <br>⚙️ **Config Check**: Verify if 'App Secret' is configured in Wechat Social Login settings. Empty secret = High Risk.

Q8Is it fixed officially? (Patch/Mitigation)

🛠️ **Fix**: Update plugin to version **> 1.3.0**. <br>✅ **Status**: Patch released by vendor. Official fix addresses the ID verification flaw.

Q9What if no patch? (Workaround)

🚧 **Workaround**: **Set the App Secret** immediately. <br>🚫 **Alternative**: Disable the plugin if not needed. <br>🔒 **Note**: Without a secret, the vulnerability remains open.

Q10Is it urgent? (Priority Suggestion)

🔥 **Priority**: **CRITICAL**. <br>⏱️ **Urgency**: Patch NOW. <br>📉 **Risk**: CVSS 9.8 (High). Easy to exploit, high impact. Do not ignore.