CVE-2024-9822

Name of the Vulnerable Software and Affected Versions The Pedalo Connector plugin for WordPress versions up to, and including, 2.0.5

Description The issue is due to insufficient restriction on the login admin user function, making it possible for unauthenticated attackers to log in as the first user, usually the administrator, or if it does not exist, then as the first administrator.

Recommendations For versions up to, and including, 2.0.5, update to a version later than 2.0.5 to resolve the issue. As a temporary workaround, consider disabling the login admin user function until a patch is available.