Custom Login Page Styler WordPress Plugin Unauthorized Log Deletion and Session Termination Vulnerability

A vulnerability exists in the Custom Login Page Styler WordPress plugin, specifically in versions through 7.1.1. The issue arises from a lack of proper capability checks in several functions, allowing authenticated users with Subscriber-level access and above to delete login logs and terminate user sessions. This unauthorized access could be exploited to manipulate login activity records and disrupt user sessions.

Impact

Exploitation of this vulnerability could lead to unauthorized deletion of login logs and termination of user sessions for users with active sessions.

Remediation

Users can update to version 7.1.2 or a newer patched version to address this vulnerability.