Authentication Bypass Using an Alternate Path or Channel
CWE-288
The product requires authentication, but the product has an alternate path or channel that does not require authentication.
We track 464 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 9.0. 21 have been exploited in real attacks.
How this weakness is prevented
- Architecture and Design: Funnel all access through a single choke point to simplify how users can access a resource. For every access, perform a check to determine if the user has permissions to access the resource.
Latest Authentication Bypass Using an Alternate Path or Channel vulnerabilities
- 8.8 High severity
Rover IDX: Missing Authentication for Critical Functionality
The Rover IDX plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0.0.2905. This is due to insufficient validation and capability check on the 'rover_idx_refresh_social_callback' function. This makes it possible for
- 9.8 Critical severity
Simple User Registration: Missing Authentication for Critical Functionality
Authentication Bypass Using an Alternate Path or Channel vulnerability in N-Media Simple User Registration wp-registration allows Authentication Bypass.This issue affects Simple User Registration: from n/a through <= 6.7.
- 9.8 Critical severity
WP REST API FNS: Missing Authentication for Critical Functionality
Authentication Bypass Using an Alternate Path or Channel vulnerability in vivek2tamrakar WP REST API FNS rest-api-fns allows Authentication Bypass.This issue affects WP REST API FNS: from n/a through <= 1.0.0.
- 8.1 High severity
Miniorange OTP Verification with Firebase: Missing Authentication for Critical Functionality
The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.6.0. This is due to missing validation on the token being supplied during the otp login through the plugin. This makes
- 9.8 Critical severity
Nextend Social Login Pro: Authentication Bypass Using an Alternate Path or Channel
The Nextend Social Login Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 3.1.14. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for una
- 9.8 Critical severity
BuddyPress Better Registration: Authentication Bypass Using an Alternate Path or Channel
Authentication Bypass Using an Alternate Path or Channel vulnerability in SK BuddyPress Better Registration better-bp-registration allows Authentication Bypass.This issue affects BuddyPress Better Registration: from n/a through <= 1.6.
- 9.8 Critical severity
Ultimate AI: Authentication Bypass Using an Alternate Path or Channel
The UltimateAI plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.8.3. This is due to insufficient verification on the user being supplied in the 'ultimate_ai_register_or_login_with_google' function. This makes it p
- 9.8 Critical severity
Pedalo Connector: Authentication Bypass Using an Alternate Path or Channel
The Pedalo Connector plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.5. This is due to insufficient restriction on the 'login_admin_user' function. This makes it possible for unauthenticated attackers to log to
- 8.8 High severity
WP Users Masquerade: Missing Authentication for Critical Functionality
The WP Users Masquerade plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.0. This is due to incorrect authentication and capability checking in the 'ajax_masq_login' function. This makes it possible for authentic
- 9.8 Critical severity
LatePoint Plugin: Missing Authentication for Critical Functionality
The LatePoint plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.0.12. This is due to insufficient verification on the user being supplied during the booking customer step. This makes it possible for unauthenticated
- 9.8 Critical severity
WordPress & WooCommerce Affiliate Program: Missing Authentication for Critical Functionality
The WordPress & WooCommerce Affiliate Program plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 8.4.1. This is due to the rtwwwap_login_request_callback() function not properly validating a user's identity prior
- 9.8 Critical severity
Wechat Social login 微信QQ钉钉登录插件: Authentication Bypass Using an Alternate Path or Channel
The Wechat Social login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.3.0. This is due to insufficient verification on the user being supplied during the social login. This makes it possible for unauthenticated
- 9.8 Critical severity
Jupiter X Core: Missing Authentication for Critical Functionality
The Jupiter X Core plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.7.5. This is due to improper authentication via the Social Login widget. This makes it possible for unauthenticated attackers to log in as th
- 9.8 Critical severity
WooCommerce Photo Reviews Premium: Missing Authentication for Critical Functionality
The WooCommerce Photo Reviews Premium plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.3.13.2. This is due to the plugin not properly validating what user transient is being used in the login() function and no
- 7.8 High severity
Workspace Control: Missing Authentication for Critical Functionality
An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.
- 7.8 High severity
Hitachi Ops Center Common Services: Missing Authentication for Critical Functionality
Authentication Bypass vulnerability in Hitachi Ops Center Common Services.This issue affects Hitachi Ops Center Common Services: from 10.9.3-00 before 11.0.2-01.
- 7.1 High severity
CylanceOPTICS for Windows: Authentication Bypass Using an Alternate Path or Channel
A tampering vulnerability in the CylanceOPTICS Windows Installer Package of CylanceOPTICS for Windows version 3.2 and 3.3 could allow an attacker to potentially uninstall CylanceOPTICS from a system thereby leaving it with only the protection of CylancePROTECT
- 8.1 High severity
MStore API – Create Native Android & iOS Apps…: Missing Authentication for Critical Functionality
The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 4.15.2. This is due to the use of loose comparison in the 'verify_id_token' function. This makes it pos
- 7.5 High severity
OpenBMC: Missing Authentication for Critical Functionality
A vulnerability in the combination of the OpenBMC's FW1050.00 through FW1050.10, FW1030.00 through FW1030.50, and FW1020.00 through FW1020.60 default password and session management allow an attacker to gain administrative access to the BMC. IBM X-Force ID: 29
- 9.8 Critical severity
WooCommerce - Social Login: Missing Authentication for Critical Functionality
The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.5. This is due to the use of loose comparison of the activation code in the 'woo_slg_confirm_email_user' function. This makes it po
- 9.9 Critical severity
inohom Nova Panel N7: Authentication Bypass Using an Alternate Path or Channel
Authentication Bypass Using an Alternate Path or Channel vulnerability in GST Electronics inohom Nova Panel N7 allows Authentication Bypass. This issue affects inohom Nova Panel N7: through 1.9.9.6. NOTE: The vendor was contacted and it was learned that the pr
- 9.8 Critical severity
Appointment Booking Calendar Plugin and…: Authentication Bypass Using an Alternate Path or Channel
The Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress plugin for WordPress is vulnerable to authentication bypass in versions 1.1.6 to 1.1.7. This is due to the plugin not properly verifying a user's identity prior to logging them
- 9.8 Critical severity
AJ-Report: Authentication Bypass Using an Alternate Path or Channel
anji-plus AJ-Report is affected by an authentication bypass vulnerability. A remote and unauthenticated attacker can append ";swagger-ui" to HTTP requests to bypass authentication and execute arbitrary Java on the victim server. Exploitation evidence was obser
- 9.8 Critical severity
Broadcast Signal Processor TRA7005: Missing Authentication for Critical Functionality
Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable to an authentication bypass exploit that could allow an attacker to have unauthorized access to protected areas of the application.
- 7.3 High severity
WooCommerce - PDF Vouchers: Authentication Bypass Using an Alternate Path or Channel
The WooCommerce - PDF Vouchers plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 4.9.3. This is due to insufficient verification on the user being supplied during a QR code login through the plugin. This makes it pos
- 7.3 High severity
WooCommerce - Social Login: Missing Authentication for Critical Functionality
The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.3. This is due to insufficient controls in the 'woo_slg_login_email' function. This makes it possible for unauthenticated attackers
- 9.8 Critical severity
MStore API – Create Native Android & iOS Apps…: Missing Authorization
The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.14.7. This is due to insufficient verification on the 'phone' parameter of the 'firebase_sms_logi
- 9.8 Critical severity
InstaWP Connect – 1-click WP Staging & Migration: Improper Authentication
The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 0.1.0.44. This is due to insufficient verification of the API key. This makes it possible for unauthenticated
- 9.8 Critical severity
parse-server: Improper Neutralization of Special Elements used in an SQL Command
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. A vulnerability in versions prior to 6.5.7 and 7.1.0 allows SQL injection when Parse Server is configured to use the PostgreSQL database. The algorithm to d
- 9.1 Critical severity
N-central: Authentication Bypass Using an Alternate Path or Channel
The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass. This vulnerability is present in all Entra-supported deployments of N-central prior to 2024.3.
- 9.8 Critical severity
N-central: Improper Authentication
The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and N-able has
- 10.0 Critical severity
Session Smart Router: Authentication Bypass Using an Alternate Path or Channel
An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device. Only rou
- 7.5 High severity
OpenBMC: Missing Authentication for Critical Functionality
IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive URI content to an unauthorized actor that bypasses authentication channels. IBM X-ForceID: 290026.
- 9.8 Critical severity
Lifeline Donation: Improper Authentication
The Lifeline Donation plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.6. This is due to insufficient verification on the user being supplied during the checkout through the plugin. This makes it possible for un
- 9.8 Critical severity
ax1800: Authentication Bypass Using an Alternate Path or Channel
An issue in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to execute arbitrary code via the router's authentication mechanism.
- 8.8 High severity
Toshiba Tec e-Studio multi-function peripheral…: Authentication Bypass Using an Alternate Path or Channel
Attackers can bypass the web login authentication process to gain access to the printer's system information and upload malicious drivers to the printer. As for the affected products/models/versions, see the reference URL.
- 10.0 Critical severity
FOXMAN-UN: Missing Authentication for Critical Functionality
An authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway component that if exploited allows attackers without any access to interact with the services and the post-authentication attack surface.
- 9.8 Critical severity
FOXMAN-UN: Authentication Bypass Using an Alternate Path or Channel
vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or code to be executed on the UNEM server allowing sensitive data to be read or modified or could cause other unintended behavi
- 9.8 Critical severity
Social Login Lite For WooCommerce: Authentication Bypass Using an Alternate Path or Channel
The Social Login Lite For WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.6.0. This is due to insufficient verification on the user being supplied during the social login through the plugin. This make
- 9.8 Critical severity
silverpeas: Authentication Bypass Using an Alternate Path or Channel
Silverpeas before 6.3.5 allows authentication bypass by omitting the Password field to AuthenticationServlet, often providing an unauthenticated user with superadmin access.