DocCheck Login WordPress Plugin Unauthorized Post Access Vulnerability
Vulnerability
A vulnerability exists in the DocCheck Login plugin for WordPress, allowing unauthorized access to password-protected posts. This issue affects all versions of the plugin up to and including 1.1.5. The vulnerability arises because the plugin redirects users to log in on a protected post after the page has fully loaded, enabling unauthenticated attackers to read posts they should not have access to.
Impact
Exploitation of this vulnerability allows unauthorized users to access and read password-protected posts, bypassing the intended access controls.
Remediation
No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.