WordPress Plugin WPMktgEngine Security Bypass (3.7.6)
Description
WordPress Plugin WPMktgEngine is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently turn on user registration. WordPress Plugin WPMktgEngine version 3.7.6 is vulnerable; prior versions may also be affected.
Remediation
Disable the plugin until a fix is available