← CVE Intelligence

CVE-2023-5525

Limit Login Attempts Reloaded < 2.25.26 - Admin+ Missing Authorization to Toggle Plugin Auto-Update PUBLISHED

Description (CNA)

The Limit Login Attempts Reloaded WordPress plugin before 2.25.26 is missing authorization on the `toggle_auto_update` AJAX action, allowing any user with a valid nonce to toggle the auto-update status of the plugin.

Affected (CNA)

Vendor / productVersions
Unknown / Limit Login Attempts Reloadedaffected 0 before 2.25.26

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.