Unauthorized Data Access in Feather Login Page for WordPress

CVE-2023-2545

What is CVE-2023-2545?

The Feather Login Page plugin for WordPress contains a flaw that allows authenticated attackers to bypass access controls due to a missing capability check in its 'getListOfUsers' function. This vulnerability affects versions 1.0.7 through 1.1.1 and enables users with subscriber-level permissions to access sensitive login links, potentially leading to privilege escalation. Website administrators should review and update their plugin to mitigate this security risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References