Search Atlas SEO Plugin Authentication Bypass Vulnerability Allowing Account Takeover

An authentication bypass vulnerability has been identified in the Search Atlas SEO plugin for WordPress, specifically in versions 2.4.4 to 2.5.12. The issue arises from a missing capability check in the 'generate_sso_url' and 'validate_sso_token' functions. This vulnerability allows authenticated attackers with Subscriber-level access and above to extract the 'nonce_token' authentication value, enabling them to log in to the first Administrator's account.

Impact

Exploitation of this vulnerability allows for authentication bypass, enabling an attacker to gain unauthorized access to an Administrator's account.

Remediation

No known patch is available. It is recommended to review the vulnerability details and consider uninstalling the affected plugin.