Broken Authentication Vulnerability

Hello,

It’s reported by Patchstack ( https://patchstack.com/database/wordpress/plugin/password-policy-manager/vulnerability/wordpress-password-policy-manager-plugin-2-0-4-account-takeover-vulnerability?_a_id=473 ) that this plugin have a Broken Authentication vulnerability.

This can be abused by a malicious actor to perform action which normally should only be able to be executed by higher privileged users. These actions might allow the malicious actor to gain admin access to the website.

Would you be providing a fix for this? considering this is a quite big risk.

Thank you..

• This topic was modified 9 months, 3 weeks ago by Vishwa.