Skip to content
Sign in
Not rated

CVE-2021-24836 The Temporary Login Without Password WordPress plugin before 1.7.1 does not have authorisation and CSRF checks when…

Description

The Temporary Login Without Password WordPress plugin before 1.7.1 does not have authorisation and CSRF checks when updating its settings, which could allows any logged-in users, such as subscribers to update them

Affected products and versions

Product Affected versions Fixed in
Temporary Login Without Password 1.7 earliest → < 1.7.1 1.7.1

Other CVEs of Temporary Login Without Password

The 3 CVEs of Temporary Login Without Password →
CVE-2026-77752 The Temporary Login Without Password WordPress plugin before 1.9.9 does not verify that the user requesting a… 7.2 High CVE-2026-77753 The Temporary Login Without Password WordPress plugin before 1.9.9 does not prevent a temporary user from creating an… 5.5 Medium
Track this CVE