WP Real Estate Manager Authentication Bypass Vulnerability Allowing Account Takeover

A vulnerability allowing authentication bypass has been identified in the WP Real Estate Manager plugin for WordPress, affecting all versions through 2.8. This vulnerability arises from inadequate identity verification in the LinkedIn login process, enabling unauthenticated attackers to bypass authentication and gain access as any user, including administrators.

Impact

Exploitation of this vulnerability allows for unauthorized access to user accounts, including administrative accounts, potentially leading to further actions within the WordPress site.

Remediation

No known patch is available. It is recommended to review the vulnerability details and consider uninstalling the affected plugin.