Authentication vulnerability in Login with WHMCS 1.11.3

The Login with WHMCS plugin for WordPress may be vulnerable to unauthenticated attackers logging in as an administrator, even if they do not have the password. This is because the plugin allows anyone to supply an email address, and it does not check if the email address is associated with the user trying to log in. This vulnerability affects versions of the plugin up to, and including, version 1.11.3.

Detected in:

Login with WHMCS fixed vulnerable versions: >= * <= 1.11.3

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.