Technical impact
The FindAll Membership WordPress plugin is vulnerable to an authentication bypass that allows an attacker to log into administrative accounts without valid credentials. The flaw exists because the plugin fails to enforce login session persistence after successful social login checks performed by findall_membership_check_facebook_user and findall_membership_check_google_user. As a result, any user who can create a temporary account and knows the administrative user's email can become an administrator. This vulnerability could allow control over the entire website, including content, site settings, and sensitive data. The weakness maps to CWE‑288.
Affected Systems
This flaw is present in all releases of the FindAll Membership plugin up through version 1.0.4 distributed by Elated Themes. Users deploying the plugin on WordPress sites should review the plugin version and apply any available security updates. No specific WordPress core versions are mentioned as affected, so the vulnerability is confined to the plugin itself.
Risk and Exploitability
The CVSS score of 9.8 marks it as critical, while the EPSS score of less than 1% suggests a low current exploitation likelihood. The vulnerability is not yet listed in CISA KEV. Attackers would need access to a temporary user account and the victim administrator's email address to exploit the flaw, implying a moderate effort and social engineering component. However, the high severity indicates that once accessed it can lead to complete site compromise.
