medium4.3
CVE-2023-5525
The Limit Login Attempts Reloaded WordPress plugin before 2.25.26 is missing authorization on the `toggle_auto_update` AJAX action, allowing any user with a va…
Impact
The Limit Login Attempts Reloaded WordPress plugin before 2.25.26 is missing authorization on the `toggle_auto_update` AJAX action, allowing any user with a valid nonce to toggle the auto-update status of the plugin.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Limitloginattempts | Limit Login Attempts Reloaded | before 2.25.26 |