Description
WordPress Plugin Login With Ajax is prone to a security bypass vulnerability. Attackers can exploit this vulnerability by registering new users even if registration is disabled in settings. WordPress Plugin Login With Ajax version 3.1.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.1.3 or latest
References
Related Vulnerabilities
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0346)
WordPress Plugin Redirection Cross-Site Request Forgery (1.1.4)
Oracle JRE Cryptographic Issues Vulnerability (CVE-2012-2739)
WordPress Plugin Logo Carousel Cross-Site Scripting (1.7.1)
WordPress Plugin SocialFit 'msg' Parameter Cross-Site Scripting (1.2.2)