Product
The EASY-JS-WPAPI Client HANDLE WordPress plugin through version 2.0 does not prevent disclosure of stored administrator credentials to unauthenticated users and fails to correctly verify authentication, allowing unauthenticated attackers to gain full administrator access.