WordPress wpShopGermany Plugin Auth Token Predictability Bug

The wpShopGermany WordPress plugin, versions prior to 2.4, has a critical security flaw. It generates API authentication tokens insecurely, using data controlled by the requester, allowing unauthenticated attackers to predict these tokens.

Exploiting this vulnerability enables attackers to gain unauthorized access and write arbitrary files, leading to potential remote code execution.