title: Disable User Login <= 1.0.1 - Unauthenticated Settings Update
description: The Disable User Login WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating its settings, allowing unauthenticated attackers to block (or unblock) users at will.
problem types: CWE-862 Missing Authorization
affected:
{
vendor: Unknown
product: Disable User Login
versions:
version: 1.0.1, status: affected, lessThanOrEqual: 1.0.1, versionType: custom
}