TI-2022-02169 CVE-2022-2350 · GHSA-7x9j-ghjr-74hqDisable User Login <= 1.0.1 - Unauthenticated Settings UpdatePriority LOW 25The Disable User Login WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating its settings, allowing unauthenticated attackers to block (or unblock) users at will.CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00496 · Published 2022-10-10 · No fix listed CWE-352