Noo JobMonster WordPress Theme Authentication Bypass Vulnerability

A vulnerability allowing authentication bypass has been identified in the Noo JobMonster theme for WordPress, affecting all versions through 4.8.1. The issue arises because the check_login() function fails to properly verify user identities before authentication, enabling unauthenticated attackers to bypass standard login procedures and gain access to administrative accounts. This vulnerability is only applicable if social login is enabled.

Impact

Exploitation of this vulnerability allows unauthenticated users to bypass authentication and access administrative accounts on the WordPress site.

Remediation

Users are advised to update the Noo JobMonster theme to version 4.8.2 or later, where this vulnerability has been patched.