CVE-2025-6786 — DocCheck Login <= 1.1.5 - Unauthorized Post Access
The DocCheck Login plugin for WordPress is vulnerable to unauthorized post access in all versions up to, and including, 1.1.5. This is due to plugin redirecting a user to login …
Published: 2025-07-04 · CVSS: 5.3 · CVSS 3.1
The DocCheck Login plugin for WordPress is vulnerable to unauthorized post access in all versions up to, and including, 1.1.5. This is due to plugin redirecting a user to login on a password protected post after the page has loaded. This makes it possible for unauthenticated attackers to read posts they should not have access to.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7