title: Authenticator < 1.3.1 - Subscriber+ Denial of Service via Feed Token Disclosure
description: The Authenticator WordPress plugin before 1.3.1 does not prevent subscribers from updating a site's feed access token, which may deny other users access to the functionality in certain configurations.
problem types: CWE-400 Uncontrolled Resource Consumption
affected:
{
vendor: Unknown
product: Authenticator
versions:
status: affected, versionType: custom, version: 0, lessThan: 1.3.1
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}