Access violation vulnerability in Login Lockdown & Protection 2.11

The Login Lockdown & Protection plugin for WordPress has a security vulnerability that allows unauthorized access to its features. This is because the plugin does not have a check in place to make sure only authorized users can use its functions. This means that attackers who have at least Subscriber-level access can get a special code that lets them add any IP address to the list of allowed users. This can only happen on new WordPress sites where the administrator has not yet visited the loginlockdown page.