WordPress Lock User Account Plugin Account Lock Bypass Vulnerability (CVE-2024-11197)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: Lock User Account <= 1.0.5 - User Lock Bypass 2. Vulnerability Description: - Describes a vulnerability in the Lock User Account plugin for WordPress that allows users to bypass account lock restrictions and interact with the affected site via APIs (such as XML-RPC or REST). - Describes the vulnerability severity as Medium (4.2). 3. Vulnerability ID: CVE-2024-11197 4. CVSS Score: 4.2 (Medium) 5. Public Release Date: November 20, 2024 6. Last Update Date: November 21, 2024 7. Researcher: Francesco Carlucci 8. Affected Versions: <= 1.0.5 9. Fix Status: No known fix. 10. Affected Software Type: Plugin 11. Affected Software Name: lock-user-account 12. Affected Software Version: <= 1.0.5 13. Public Disclosure Status: Publicly Disclosed 14. Public Disclosure Status: Publicly Disclosed 15. Public Disclosure Status: Publicly Disclosed 16. Public Disclosure Status: Publicly Disclosed 17. Public Disclosure Status: Publicly Disclosed 18. Public Disclosure Status: Publicly Disclosed 19. Public Disclosure Status: Publicly Disclosed 20. Public Disclosure Status: Publicly Disclosed 21. Public Disclosure Status: Publicly Disclosed 22. Public Disclosure Status: Publicly Disclosed 23. Public Disclosure Status: Publicly Disclosed 24. Public Disclosure Status: Publicly Disclosed 25. Public Disclosure Status: Publicly Disclosed 26. Public Disclosure Status: Publicly Disclosed 27. Public Disclosure Status: Publicly Disclosed 28. Public Disclosure Status: Publicly Disclosed 29. Public Disclosure Status: Publicly Disclosed 30. Public Disclosure Status: Publicly Disclosed 31. Public Disclosure Status: Publicly Disclosed 32. Public Disclosure Status: Publicly Disclosed 33. Public Disclosure Status: Publicly Disclosed 34. Public Disclosure Status: Publicly Disclosed 35. Public Disclosure Status: Publicly Disclosed 36. Public Disclosure Status: Publicly Disclosed 37. Public Disclosure Status: Publicly Disclosed 38. Public Disclosure Status: Publicly Disclosed 39. Public Disclosure Status: Publicly Disclosed 40. Public Disclosure Status: Publicly Disclosed 41. Public Disclosure Status: Publicly Disclosed 42. Public Disclosure Status: Publicly Disclosed 43. Public Disclosure Status: Publicly Disclosed 44. Public Disclosure Status: Publicly Disclosed 45. Public Disclosure Status: Publicly Disclosed 46. Public Disclosure Status: Publicly Disclosed 47. Public Disclosure Status: Publicly Disclosed 48. Public Disclosure Status: Publicly Disclosed 49. Public Disclosure Status: Publicly Disclosed 50. Public Disclosure Status: Publicly Disclosed 51. Public Disclosure Status: Publicly Disclosed 52. Public Disclosure Status: Publicly Disclosed 53. Public Disclosure Status: Publicly Disclosed 54. Public Disclosure Status: Publicly Disclosed 55. Public Disclosure Status: Publicly Disclosed 56. Public Disclosure Status: Publicly Disclosed 57. Public Disclosure Status: Publicly Disclosed 58. Public Disclosure Status: Publicly Disclosed 59. Public Disclosure Status: Publicly Disclosed 60. Public Disclosure Status: Publicly Disclosed 61. Public Disclosure Status: Publicly Disclosed 62. Public Disclosure Status: Publicly Disclosed 63. Public Disclosure Status: Publicly Disclosed 64. Public Disclosure Status: Publicly Disclosed 65. Public Disclosure Status: Publicly Disclosed 66. Public Disclosure Status: Publicly Disclosed 67. Public Disclosure Status: Publicly Disclosed 68. Public Disclosure Status: Publicly Disclosed 69. Public Disclosure Status: Publicly Disclosed 70. Public Disclosure Status: Publicly Disclosed 71. Public Disclosure Status: Publicly Disclosed 72. Public Disclosure Status: Publicly Disclosed 73. Public Disclosure Status: Publicly Disclosed 74. Public Disclosure Status: Publicly Disclosed 75. Public Disclosure Status: Publicly Disclosed 76. Public Disclosure Status: Publicly Disclosed 77. Public Disclosure Status: Publicly Disclosed 78. Public Disclosure Status: Publicly Disclosed 79. Public Disclosure Status: Publicly Disclosed 80. Public Disclosure Status: Publicly Disclosed 81. Public Disclosure Status: Publicly Disclosed 82. Public Disclosure Status: Publicly Disclosed 83. Public Disclosure Status: Publicly Disclosed 84. Public Disclosure Status: Publicly Disclosed 85. Public Disclosure Status: Publicly Disclosed 86. Public Disclosure Status: Publicly Disclosed 87. Public Disclosure Status: Publicly Disclosed 88. Public Disclosure Status: Publicly Disclosed 89. Public Disclosure Status: Publicly Disclosed 90. Public Disclosure Status: Publicly Disclosed 91. Public Disclosure Status: Publicly Disclosed 92. Public Disclosure Status: Publicly Disclosed 93. Public Disclosure Status: Publicly Disclosed 94. Public Disclosure Status: Publicly Disclosed 95. Public Disclosure Status: Publicly Disclosed 96. Public Disclosure Status: Publicly Disclosed 97. Public Disclosure Status: Publicly Disclosed 98. Public Disclosu

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Lock User Account Plugin Account Lock Bypass Vulnerability (CVE-2024-11197)