CVE-2024-7503: Authentication bypass vulnerability in the WooCommerce - Social Login plugin for WordPress, versions 2.7.5 and earlier. This flaw allows unauthenticated attackers to potentially log in as any user, including administrators, if they possess the userID and the email module is active. The vulnerability stems from insecure comparison of activation codes within the 'woo_slg_confirm_email_user' function. Even though the CVSS score is 0, indicating minimal base severity, the presence of "In The Wild" tag suggests active exploitation. With an SVRS of 30, it's classified as low risk, but continuous monitoring is advisable due to potential escalation if threat actors actively target this WooCommerce plugin flaw. This vulnerability could lead to complete site compromise and data breaches. Immediate patching is advisable to mitigate risks.