Input validation vulnerability in CMS Commander – Manage Multiple Sites 2.287

The WordPress CMS Commander plugin has a security flaw that could let unauthorised people gain access to it. This is due to the fact that the plugin uses a unique code which is not secure enough. This code can be changed, allowing the plugin to be controlled remotely with commands such as creating an administrator access URL. This could be used to gain higher levels of access and cause serious damage. To be vulnerable, the plugin must not be configured yet, but if used alongside other security flaws, the impact can be severe.