Description
WordPress Plugin Protected Posts Logout Button is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently update plugin's settings. WordPress Plugin Protected Posts Logout Button version 1.4.5 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.4.6 or latest
References
Related Vulnerabilities
WordPress Plugin Post Title Counter Cross-Site Scripting (1.1)
WordPress Plugin MC4WP:Mailchimp for WordPress Cross-Site Scripting (4.1.6)
SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-17305)
Apache HTTP Server Missing Authorization Vulnerability (CVE-2020-13938)