Description
WordPress Plugin Admin Custom Login is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application; other attacks are also possible. WordPress Plugin Admin Custom Login version 3.2.7 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.2.8 or latest
References
Related Vulnerabilities
WordPress Plugin WP Symposium Pro Social Network Multiple Vulnerabilities (15.12)
Dolibarr Improper Authentication Vulnerability (CVE-2020-7995)
WordPress Plugin Wallable-Social Networking Arbitrary File Upload (1.1)
Oracle Application Server CVE-2006-5363 Vulnerability (CVE-2006-5363)
WordPress Plugin Ultimate Membership Pro SQL Injection (3.3)