Plugin is vulnerable to Broken Access Control

Broken Access Control vulnerability in WordPress Login With Ajax Plugin. A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action. This vulnerability has not been known to be fixed yet.

https://patchstack.com/database/vulnerability/login-with-ajax/wordpress-login-with-ajax-plugin-4-1-broken-access-control-vulnerability