Protect WP Admin, CVE-2021-24906

CVE, Research URL: CVE-2021-24906
Home page URL: Security reports for Protect WP Admin
Application: Protect WP Admin
Published on: Jan 24, 2022
Research Description: The Protect WP Admin WordPress plugin before 3.6.2 does not check for authorisation in the lib/pwa-deactivate.php file, which could allow unauthenticated users to disable the plugin (and therefore the protection offered) via a crafted request
Affected versions: max 3.8.
Status: vulnerable