Description
WordPress Plugin Catch Breadcrumb is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently change plugin's configuration. WordPress Plugin Catch Breadcrumb version 1.6 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.7 or latest
References
https://sploitus.com/exploit?id=WPEX-ID:181A729E-FFFE-457C-9E8D-A4343FD2E630
https://plugins.svn.wordpress.org/catch-breadcrumb/trunk/README.txt
Related Vulnerabilities
PostgreSQL Other Vulnerability (CVE-2007-3280)
WordPress Plugin Fetch Tweets Unspecified Vulnerability (1.3.3.6)
WordPress Plugin Pinpoint Booking System-#1 WordPress Booking SQL Injection (2.0)
WordPress Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2014-6412)
WordPress Plugin WP-SpamFree Anti-Spam 'id' Parameter SQL Injection (3.2.1)