Saad Iqbal All In One Login Authentication Bypass Vulnerability

An authentication bypass vulnerability allowing identity spoofing has been identified in the Saad Iqbal All In One Login WordPress plugin, specifically in versions through 2.0.8. This vulnerability arises from improper authentication mechanisms, enabling users to bypass login requirements and potentially impersonate other users.

Impact

Exploitation of this vulnerability allows for authentication bypass, enabling identity spoofing. This could lead to unauthorized access to user accounts or administrative privileges, depending on the roles of the impersonated users.