Description
The Contest Gallery WordPress plugin before 30.0.7 does not route its front-end login through the standard WordPress authentication flow, issuing an authentication cookie directly after the password check, which bypasses installed brute-force-protection and two-factor-authentication Contest Gallery WordPress plugin before 30.0.7 and enables unlimited, unthrottled password guessing against any account (including administrators) up to full account takeover.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Contest Gallery | < 30.0.7 | 30.0.7 |
References
- https://wpscan.com/vulnerability/fa83e5a0-ed6a-4043-8df3-8654bb354a99/ exploit vdb-entry technical-description