Social Login, Passkeys, Magic Link & Email OTP – Passwordless Login (<= 1.4.3)

An authentication bypass vulnerability in the VentraConnect WordPress plugin allows unauthenticated attackers to hijack user accounts, including administrators, by spoofing verified email claims during Spotify OAuth flows.