Title: Broken Authentication Vulnerability
Last modified: June 6, 2025

---

# Broken Authentication Vulnerability

 *  [Vishwa](https://wordpress.org/support/users/sbvi1122/)
 * (@sbvi1122)
 * [1 year ago](https://wordpress.org/support/topic/broken-authentication-vulnerability/)
 * Hello,
 * It’s reported by Patchstack ( [https://patchstack.com/database/wordpress/plugin/password-policy-manager/vulnerability/wordpress-password-policy-manager-plugin-2-0-4-account-takeover-vulnerability?_a_id=473](https://patchstack.com/database/wordpress/plugin/password-policy-manager/vulnerability/wordpress-password-policy-manager-plugin-2-0-4-account-takeover-vulnerability?_a_id=473))
   that this plugin have a Broken Authentication vulnerability.
 * This can be abused by a malicious actor to perform action which normally should
   only be able to be executed by higher privileged users. These actions might allow
   the malicious actor to gain admin access to the website.
 * Would you be providing a fix for this? considering this is a quite big risk.
 * Thank you..
    -  This topic was modified 1 year ago by [Vishwa](https://wordpress.org/support/users/sbvi1122/).

The topic ‘Broken Authentication Vulnerability’ is closed to new replies.

 * ![](https://ps.w.org/password-policy-manager/assets/icon-256x256.png?rev=2454407)
 * [Password Policy Manager | Password Manager](https://wordpress.org/plugins/password-policy-manager/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/password-policy-manager/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/password-policy-manager/)
 * [Active Topics](https://wordpress.org/support/plugin/password-policy-manager/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/password-policy-manager/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/password-policy-manager/reviews/)

## Tags

 * [attack](https://wordpress.org/support/topic-tag/attack/)
 * [malicious](https://wordpress.org/support/topic-tag/malicious/)
 * [plugin](https://wordpress.org/support/topic-tag/plugin/)
 * [update](https://wordpress.org/support/topic-tag/update/)

 * 0 replies
 * 1 participant
 * Last reply from: [Vishwa](https://wordpress.org/support/users/sbvi1122/)
 * Last activity: [1 year ago](https://wordpress.org/support/topic/broken-authentication-vulnerability/)
 * Status: not resolved