CVE-2023-3249

The Web3 – Crypto wallet Login & NFT token gating plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.6.0. This is due to incorrect authentication checking in the 'hidden_form_data' function. This makes it possible for authenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username.

• CWE-288

• https://plugins.trac.wordpress.org/browser/web3-authentication/tags/2.6.0/classes/common/Web3/controller/class-moweb3flowhandler.php#L198Patch
• https://plugins.trac.wordpress.org/changeset/2933325/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/e30b62de-7280-4c29-b882-dfa83e65966b?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/browser/web3-authentication/tags/2.6.0/classes/common/Web3/controller/class-moweb3flowhandler.php#L198Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/e30b62de-7280-4c29-b882-dfa83e65966b?source=cveThird Party Advisory

Published

Jun 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-32484 Dell Networking Switches running Enterprise SONiC versions …9.8
• CVE-2023-32485 Dell SmartFabric Storage Software version 1.3 and lower con…9.8
• CVE-2023-32486 Dell PowerScale OneFS 9.5.x version contain a privilege esc…7.8
• CVE-2023-32487 Dell PowerScale OneFS, 8.2.x - 9.5.0.x, contains an elevati…7.8
• CVE-2023-32488 Dell PowerScale OneFS, 8.2.x-9.5.0.x, contains an informati…4.3
• CVE-2023-32489 Dell PowerScale OneFS 8.2x -9.5x contains a privilege escal…6.7
• CVE-2023-32490 Dell PowerScale OneFS 8.2x -9.5x contains an improper privi…6.7
• CVE-2023-32491 Dell PowerScale OneFS 9.5.0.x, contains an insertion of sen…6.5
• CVE-2023-32492 Dell PowerScale OneFS 9.5.0.x contains an incorrect default…7.1
• CVE-2023-32493 Dell PowerScale OneFS, 9.5.0.x, contains a protection mecha…9.8
• CVE-2023-32494 Dell PowerScale OneFS, 8.0.x-9.5.x, contains an improper ha…6.7
• CVE-2023-32495 Dell PowerScale OneFS, 8.2.x-9.5.x, contains a exposure of …7.8