Description
WordPress Plugin Absolute Privacy is prone to a security bypass vulnerability. Attackers can exploit this vulnerability to bypass authentication mechanism and gain administrative access to an affected application, which may aid in further attacks. WordPress Plugin Absolute Privacy version 2.0.5 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.0.6 or latest
References
Related Vulnerabilities
WordPress Plugin GD bbPress Attachments Multiple Vulnerabilities (2.2)
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2016-4978)
MODX Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-7321)
WordPress Plugin WordPress Colorbox Lightbox Cross-Site Scripting (1.1.2)