DoLogin Security, ec9ed021b819b9fec28c1dd4736944e0b26ef789

CVE, Research URL: ec9ed021b819b9fec28c1dd4736944e0b26ef789
Home page URL: Security reports for DoLogin Security
Application: DoLogin Security
Published on: Sep 14, 2023
Research Description: DoLogin Security [dologin] < 3.7.1 DoLogin Security <= 3.7 - Missing Authorization on Dashboard Widget The DoLogin Security plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the dashboard widget in versions up to, and including, 3.7. This makes it possible for authenticated attackers to view the login attempts log.
Affected versions: max 3.7.1.
Status: vulnerable