WordPress Inactive Logout plugin <= 3.2.2 - Broken Access Control vulnerability

CVE-2023-44142

What is CVE-2023-44142?

A vulnerability exists in the Inactive Logout plugin for WordPress, where missing authorization permits unauthorized access due to incorrectly configured access control security levels. This issue is particularly concerning for website administrators as it can lead to unauthorized operations on user accounts, affecting the overall security posture of the WordPress sites utilizing this plugin. The affected versions range from n/a up to 3.2.2, highlighting the importance of immediate review and possible updates to ensure robust security measures are maintained.

References