WordPress Plugin InfiniteWP Client is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently disable a users web site by putting it in maintenance mode if admin username is known. WordPress Plugin InfiniteWP Client version 1.3.7 is vulnerable; prior versions may also be affected.


Update to plugin version 1.3.8 or latest


Related Vulnerabilities