Description

WordPress Plugin Authenticator is prone to a Denial of Service vulnerability. Exploiting this issue may allow an attacker to cause the affected website to deny users access to it's functionality in certain configurations. WordPress Plugin Authenticator version 1.3.0 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 1.3.1 or latest

References

https://wpscan.com/vulnerability/802a2139-ab48-4281-888f-225e6e3134aa

https://plugins.svn.wordpress.org/authenticator/trunk/readme.txt

Related Vulnerabilities

Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5492)

WebLogic CVE-2017-3248 Vulnerability (CVE-2017-3248)

WordPress Plugin GeoDirectory Location Manager Multiple SQL Injection Vulnerabilities (2.1.0.9)

WordPress Plugin WF Cookie Consent Cross-Site Scripting (1.1.3)

Oracle HTTP Server Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2021-4184)

Severity

High

Classification

CVE-2022-3994 CWE-400 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Missing Update Denial Of Service