Wurdey WordPress Plugin Authentication Bypass Vulnerability

The Wurdey WordPress plugin through 1.0.0 contains an authentication bypass vulnerability.

The plugin does not verify a request signature before logging a user in.

• Affected versions: 1.0.0 and earlier
• Attack condition: knowing only the administrator's username
• Impact: unauthenticated attackers can authenticate as an administrator