Vulnerabilities > Miniorange > Web3 Crypto Wallet Login NFT Token Gating > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-02-12 CVE-2023-6036 Incorrect Authorization vulnerability in Miniorange Web3 - Crypto Wallet Login & NFT Token Gating
The Web3 WordPress plugin before 3.0.0 is vulnerable to an authentication bypass due to incorrect authentication checking in the login flow in functions 'handle_auth_request' and 'hadle_login_request'.
network
low complexity
miniorange CWE-863
critical
9.8