Nextend Social Login and Register WordPress Plugin Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Nextend Social Login and Register plugin for WordPress, affecting all versions through 3.1.21. The issue arises from inadequate nonce validation in the 'unlinkUser' function, allowing unauthenticated attackers to unlink a user's social login by sending a forged request, provided they can persuade a site administrator to click a link or perform a similar action.

Impact

Exploitation of this vulnerability allows for Cross-Site Request Forgery, enabling attackers to unlink a user's social login from a provider, potentially disrupting the user's account access or social integration features.

Reproduction

To reproduce this vulnerability, an attacker must send a request to the 'unlinkUser' function without a valid nonce. This can be done by tricking an administrator into clicking a link that initiates the unlinking process. The absence of proper nonce validation allows the request to be processed, unlinking the social account without the user's consent.

Remediation

Users are advised to update the Nextend Social Login and Register plugin to version 3.1.22 or later.