Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2022-41839

WordPress LoginPress plugin <= 1.6.2 - Broken Access Control vulnerability

Broken Access Control vulnerability in WordPress LoginPress plugin <= 1.6.2 on WordPress leading to unauth. changing of Opt-In or Opt-Out tracking settings.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Wpbrigade
Products
Loginpress
CVE-2022-0347

LoginPress < 1.5.12 - Reflected Cross-Site Scripting

The LoginPress | Custom Login Page Customizer WordPress plugin before 1.5.12 does not escape the redirect-page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Wpbrigade
Products
Loginpress
CVE-2019-15872

The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings.

CVSS 3.0 · 9.8 Critical EPSS 2.2% KEV · Not listed
Vendors
Wpbrigade
Products
Loginpress
CVE-2019-15871

The LoginPress plugin before 1.1.4 for WordPress has no capability check for updates to settings.

CVSS 3.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Wpbrigade
Products
Loginpress