CVE-2021-24836
13.12.2021, 11:15
The Temporary Login Without Password WordPress plugin before 1.7.1 does not have authorisation and CSRF checks when updating its settings, which could allows any logged-in users, such as subscribers to update them
| Vendor | Product | Version |
|---|---|---|
| storeapps | temporary_login_without_password | 𝑥 < 1.7.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration