CVE-2023-5525 (published 2023-11-27T16:22:06.971Z)
The Limit Login Attempts Reloaded WordPress plugin before 2.25.26 is missing authorization on the `toggle_auto_update` AJAX action, allowing any user with a valid nonce to toggle the auto-update status of the plugin.
Affected products: Vendor: Unknown
Product: Limit Login Attempts Reloaded
Versions: 0