Inactive Logout, 46dbd77684eef58bd540295eb5726e7431e5561a

CVE, Research URL: 46dbd77684eef58bd540295eb5726e7431e5561a
Home page URL: Security reports for Inactive Logout
Application: Inactive Logout
Published on: Sep 20, 2023
Research Description: Inactive Logout [inactive-logout] < 3.2.3 Inactive Logout <= 3.2.2 - Missing Authorization The Inactive Logout plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ina_reset_adv_settings() function in versions up to, and including, 3.2.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to reset the plugin's settings.
Affected versions: max 3.2.3.
Status: vulnerable