The LoginPress plugin before 1.1.4 for WordPress has no capability check for updates to settings.Referenceshttps://wordpress.org/plugins/loginpress/#developershttps://www.webarxsecurity.com/loginpress-plugin/