This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis →
Q1What is this vulnerability? (Essence + Consequences)
🚨 **Essence**: Critical Auth Bypass in Wechat Social Login plugin. <br>💥 **Consequences**: Attackers can log in as ANY user (even Admins) without passwords. Total site compromise possible.
Q2Root Cause? (CWE/Flaw)
🛡️ **CWE-288**: Authentication Bypass. <br>🔍 **Flaw**: Insufficient verification of the user ID during social login. The system trusts the supplied `uid` without checking if it matches the authenticated session.
Q3Who is affected? (Versions/Components)
📦 **Vendor**: xunhuweb. <br>📉 **Affected**: Wechat Social login plugin versions **≤ 1.3.0**. <br>🌐 **Platform**: WordPress sites using this specific plugin.
Q4What can hackers do? (Privileges/Data)
👑 **Privileges**: Full Admin access if `uid=1` (or admin ID) is known. <br>📂 **Data**: Complete read/write access to the WordPress site. <br>🔓 **Identity**: Impersonate ANY existing user.
Q5Is exploitation threshold high? (Auth/Config)
⚠️ **Threshold**: LOW. <br>🔑 **Auth**: None required (Unauthenticated). <br>⚙️ **Config**: Exploitable ONLY if the App Secret is NOT set (default empty value). If secret is set, this specific bypass may be blocked.
Q6Is there a public Exp? (PoC/Wild Exploitation)
🔓 **Exploit**: YES. Public PoC available on GitHub (RandomRobbieBF). <br>🌍 **Status**: Active exploitation possible. Simple script to swap `uid` parameter.
Q7How to self-check? (Features/Scanning)
🔍 **Check**: Scan for plugin version **1.3.0 or lower**. <br>⚙️ **Config Check**: Verify if 'App Secret' is configured in Wechat Social Login settings. Empty secret = High Risk.
Q8Is it fixed officially? (Patch/Mitigation)
🛠️ **Fix**: Update plugin to version **> 1.3.0**. <br>✅ **Status**: Patch released by vendor. Official fix addresses the ID verification flaw.
Q9What if no patch? (Workaround)
🚧 **Workaround**: **Set the App Secret** immediately. <br>🚫 **Alternative**: Disable the plugin if not needed. <br>🔒 **Note**: Without a secret, the vulnerability remains open.
Q10Is it urgent? (Priority Suggestion)
🔥 **Priority**: **CRITICAL**. <br>⏱️ **Urgency**: Patch NOW. <br>📉 **Risk**: CVSS 9.8 (High). Easy to exploit, high impact. Do not ignore.