Description
WordPress Plugin Convert Plus is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently create new accounts. WordPress Plugin Convert Plus version 3.4.4 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.4.5 or latest
References
Related Vulnerabilities
WordPress Plugin Wordfence Security-Firewall & Malware Scan Cross-Site Scripting (5.2.2)
WordPress Plugin Import all XML, CSV & TXT into WordPress Information Disclosure (3.6.74)
WordPress Plugin Login as User or Customer Cross-Site Request Forgery (1.9)
WordPress Plugin Vmax Project Manager Local File Inclusion (1.1)