Sanjaysolutions Loginplus Missing Authorization Vulnerability Allowing Broken Access Control

Vulnerability

A broken access control vulnerability has been identified in the Sanjaysolutions Loginplus WordPress plugin, affecting versions through 1.2. This vulnerability allows users to access functionalities that are not properly restricted by access control lists (ACLs), potentially leading to unauthorized actions or data exposure.

Impact

Exploitation of this vulnerability could allow users to perform actions or access data that they are not authorized to, due to the lack of proper access controls in the affected plugin.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.6
exploitability
7.4
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.