Description

WordPress Plugin Authenticator is prone to a Denial of Service vulnerability. Exploiting this issue may allow an attacker to cause the affected website to deny users access to it's functionality in certain configurations. WordPress Plugin Authenticator version 1.3.0 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 1.3.1 or latest

References

https://wpscan.com/vulnerability/802a2139-ab48-4281-888f-225e6e3134aa

https://plugins.svn.wordpress.org/authenticator/trunk/readme.txt

Related Vulnerabilities

WordPress Plugin Ultimate Addons for Elementor Security Bypass (1.20.0)

WordPress Improper Input Validation Vulnerability (CVE-2017-9065)

WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Multiple Cross-Site Scripting Vulnerabilities (1.1.30)

Ruby on Rails Improper Input Validation Vulnerability (CVE-2010-3933)

TYPO3 Improper Authentication Vulnerability (CVE-2011-4628)

Severity

High

Classification

CVE-2022-3994 CWE-400 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Missing Update Denial Of Service