Input validation vulnerability in Custom Login Page | Temporary Users | Rebrand Login | Login Captcha 1.1.1

The Feather Login Page is a plugin for the WordPress website builder. A vulnerability has been discovered in versions of this plugin between 1.0.7 and 1.1.1. It is possible for someone who is not logged in to a WordPress website to create a new user with administrator privileges. To do this, they need to trick an administrator into clicking a link. They can use a different vulnerability to get the login link for the new user or send a password reset to the user’s email address.