User Verification by PickPlugins Authentication Bypass Vulnerability via OTP Verification REST API Endpoint

A vulnerability allowing authentication bypass has been identified in the User Verification by PickPlugins plugin for WordPress, affecting all versions through 2.0.46. The issue arises from the use of a loose PHP comparison operator for validating OTP codes in the 'user_verification_form_wrap_process_otpLogin' function. This flaw enables unauthenticated attackers to log in as any user with a verified email address, including administrators, by submitting a 'true' OTP value.

Impact

Exploitation of this vulnerability allows for unauthenticated authentication bypass, enabling attackers to log in as any user with a verified email address, such as an administrator.

Remediation

Users are advised to update the plugin to version 2.0.47 or a newer patched version.