Critical Auth Bypass Vulnerability In InfiniteWP Client And WP Time Capsule
https://www.webarxsecurity.comLooks like the InfiniteWP Client and WP Time Capsule plugins contain logical issues in the code that allows you to login into an administrator account without a password. If your version is InfiniteWP Client < 1.9.4.5 and WP Time Capsule < 1.21.16 it’s crucial you update the pluginsASAP.
