OTP-Less One Tap Sign In Privilege Escalation Vulnerability via Account Takeover

A privilege escalation vulnerability allowing account takeover has been identified in the OTP-less One Tap Sign In plugin for WordPress, affecting versions 2.0.14 prior to 2.0.59. The vulnerability arises because the plugin fails to properly validate a user's identity before allowing changes to user details, such as email addresses. This flaw enables unauthenticated attackers to modify the email addresses of arbitrary users, including administrators. Once the email is changed, the attacker can reset the user's password and gain access to their account. Additionally, the plugin's response includes authentication cookies that can be used for direct account access.

Impact

Exploitation of this vulnerability allows for unauthorized email changes, password resets, and account access, including administrative accounts.