WordPress Plugin InfiniteWP Client Security Bypass (1.9.4.4)
Description
WordPress Plugin InfiniteWP Client is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently login into an administrator account without a password. WordPress Plugin InfiniteWP Client version 1.9.4.4 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.9.4.5 or latest