WordPress WooODT Lite Plugin Authentication Bypass Vulnerability

An authentication bypass vulnerability allowing identity spoofing has been identified in the WordPress WooODT Lite plugin, specifically in versions through 2.5.2. This vulnerability enables malicious actors to bypass authentication mechanisms, potentially leading to unauthorized access or actions within the application.

Impact

Exploiting this vulnerability could allow an attacker to bypass authentication, leading to unauthorized access or actions within the application.

Remediation

Users are advised to update to a version of the WooODT Lite plugin that is later than 2.5.2. For those using Patchstack, a mitigation rule has been issued to block attacks until an official patch is available.