The DocCheck Login plugin for WordPress is vulnerable to unauthorized post access in all versions up to, and including, 1.1.5. This is due to plugin redirecting a user to login on a password protected post after the page has loaded. This makes it possible for unauthenticated attackers to read posts they should not have access to.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Doccheck Login Plugin | — | Update doccheck-login plugin to version 1.1.6, or a newer patched version | Jul 28, 2025 | Jul 3, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub