A critical authentication bypass vulnerability in the wpdo5ea DoLogin Security plugin allows attackers to compromise user accounts through predictable random number generation.

The plugin utilizes a cryptographically weak pseudo-random number generator (PRNG) when handling authentication tokens. This allows an authenticated attacker to predict generated values and bypass security controls to gain unauthorized access to other user accounts.

This vulnerability carries a CVSS score of 8.8, indicating a high risk to account integrity and data privacy. Successful exploitation allows an attacker to impersonate legitimate users or gain unauthorized access to administrative functions, potentially resulting in widespread data theft or full site compromise.

Immediate Action: Deactivate or remove the DoLogin Security plugin immediately, as the use of insecure PRNGs renders current versions fundamentally unsafe.

Proactive Monitoring: Review authentication logs for anomalous login patterns or multiple failed attempts that might indicate an attacker testing for predictable token sequences.

Compensating Controls: Enforce multi-factor authentication (MFA) via a different, secure plugin and ensure that administrative interfaces are restricted to trusted IP addresses.

Public Exploit Available: false

Authentication bypass vulnerabilities are highly critical as they undermine the primary security gate of the application. Administrators should remove the affected plugin immediately and rotate credentials for any accounts that may have been accessible while the vulnerable software was active.