WordPress Temporary Login Without Password plugin cross-site request forgery vulnerability

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is a WordPress open source application plugin. WordPress Temporary Login Without Password plugin has a cross-site request forgery vulnerability in versions prior to 1.7.1, which stems from updating its The vulnerability is caused by the failure to authorize and CSRF check when updating its settings, which can be exploited by attackers to update the settings.