Themeinprogress Wip Custom Login vulnerabilities

• themeinprogress wip custom login WordPress WIP Custom Login Plugin <= 1.2.7 is vulnerable to Broken Access Control CVE-2022-42884 5.4 MediumJanuary 17, 2024
• themeinprogress wip custom login WordPress WIP Custom Login Plugin <= 1.2.9 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-33313 4.3 MediumMay 28, 2023