Access violation vulnerability in Login Lockdown – Protect Login Form 2.08

The Login Lockdown plugin for WordPress has a security issue that could allow unauthorized users to access sensitive data. This is because the plugin does not have a check in place to ensure that only authorized users can generate an export file. This means that attackers who have subscriber access or higher can export the plugin’s settings, which include a list of allowed IP addresses and a global unlock key. With this key, an attacker can add their own IP address to the whitelist.