CVE-2025-3766 | Login Lockdown & Protection Plugin up to 2.11 on WordPress ajax_run_tool authorization

A vulnerability, which was classified as critical, was found in Login Lockdown & Protection Plugin up to 2.11 on WordPress. Affected is the function ajax_run_tool. The manipulation leads to missing authorization.

This vulnerability is traded as CVE-2025-3766. It is possible to launch the attack remotely. There is no exploit available.