Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2012-2759

Cross-site scripting (XSS) vulnerability in login-with-ajax.php in the Login With Ajax (aka login-with-ajax) plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter in a lostpassword action to wp-login.php.

CVSS 2.0 · 4.3 Medium EPSS 2.1% KEV · Not listed
Vendors
Netweblogic Wordpress
Products
Login With Ajax Wordpress
CVE-2012-4283

Cross-site scripting (XSS) vulnerability in the Login With Ajax plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter.

CVSS 2.0 · 4.3 Medium EPSS 2.1% KEV · Not listed
Vendors
Netweblogic Wordpress
Products
Login With Ajax Wordpress
CVE-2013-2707

Cross-site request forgery (CSRF) vulnerability in the Login With Ajax plugin before 3.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings.

CVSS 2.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Netweblogic Wordpress
Products
Login With Ajax Wordpress