Vulnerability CVE-2023-4800


Published: 2023-10-16

Description:
The DoLogin Security WordPress plugin before 3.7.1 does not restrict the access of a widget that shows the IPs of failed logins to low privileged users.

Type:

CWE-425

(Direct Request ('Forced Browsing'))

 References:
https://wpscan.com/vulnerability/7eae1434-8c7a-4291-912d-a4a07b73ee56

Copyright 2024, cxsecurity.com

 

Back to Top