Wordpress Temporary Login Plugin version 1.0.0 has an authentication bypass vulnerability involving the 'temp-login-token' parameter. Exploiting this flaw allows an attacker to bypass authentication controls and potentially take over user accounts. The vulnerability affects all versions up to and including 1.0.0. There is no vendor advisory or patch information available, and no known exploits in the wild have been reported.

Successful exploitation of this vulnerability could allow an attacker to bypass authentication mechanisms and gain unauthorized access to Wordpress accounts, potentially leading to account takeover. This could compromise site integrity and user data depending on the privileges of the affected accounts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling the Temporary Login Plugin or restricting its usage to trusted administrators only to reduce exposure.