CVE-2026-1503

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-1503", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2026-01-27T19:28:28.952Z", "datePublished": "2026-03-21T03:26:54.649Z", "dateUpdated": "2026-04-08T17:05:59.673Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:05:59.673Z"}, "affected": [{"vendor": "frankkoenen", "product": "Plugin Name: login_register", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.2.0", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The login_register plugin for WordPress is vulnerable to Cross-Site Request Forgery to Stored Cross-Site Scripting in all versions up to, and including, 1.2.0. This is due to missing nonce validation on the settings page and insufficient input sanitization and output escaping on the 'login_register_login_post' parameter. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page via a forged request granted they can trick an administrator into performing an action such as clicking on a link."}], "title": "login_register <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/8c82d209-3c69-4d6e-a129-d519f6601540?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/login-register/tags/1.2.0/login_register_admin.php#L12"}, {"url": "https://plugins.trac.wordpress.org/browser/login-register/tags/1.2.0/login_register_admin.php#L14"}, {"url": "https://plugins.trac.wordpress.org/browser/login-register/tags/1.2.0/login_register_admin.php#L69"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-352 Cross-Site Request Forgery (CSRF)", "cweId": "CWE-352", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Muhammad Nur Ibnu Hubab"}], "timeline": [{"time": "2026-03-20T15:16:29.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-23T15:07:36.684367Z", "id": "CVE-2026-1503", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-23T15:54:20.991Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-1503", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-23T15:07:36.684367Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-23T15:07:37.731Z"}}], "cna": {"title": "login_register <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting", "credits": [{"lang": "en", "type": "finder", "value": "Muhammad Nur Ibnu Hubab"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"}}], "affected": [{"vendor": "frankkoenen", "product": "Plugin Name: login_register", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.2.0"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2026-03-20T15:16:29.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/8c82d209-3c69-4d6e-a129-d519f6601540?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/login-register/tags/1.2.0/login_register_admin.php#L12"}, {"url": "https://plugins.trac.wordpress.org/browser/login-register/tags/1.2.0/login_register_admin.php#L14"}, {"url": "https://plugins.trac.wordpress.org/browser/login-register/tags/1.2.0/login_register_admin.php#L69"}], "descriptions": [{"lang": "en", "value": "The login_register plugin for WordPress is vulnerable to Cross-Site Request Forgery to Stored Cross-Site Scripting in all versions up to, and including, 1.2.0. This is due to missing nonce validation on the settings page and insufficient input sanitization and output escaping on the 'login_register_login_post' parameter. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page via a forged request granted they can trick an administrator into performing an action such as clicking on a link."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-352", "description": "CWE-352 Cross-Site Request Forgery (CSRF)"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:05:59.673Z"}}}, "cveMetadata": {"cveId": "CVE-2026-1503", "state": "PUBLISHED", "dateUpdated": "2026-04-08T17:05:59.673Z", "dateReserved": "2026-01-27T19:28:28.952Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2026-03-21T03:26:54.649Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Plugin Name: login_register", "vendor": "frankkoenen", "versions": [{"lessThanOrEqual": "1.2.0", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The login_register plugin for WordPress is vulnerable to Cross-Site Request Forgery to Stored Cross-Site Scripting in all versions up to, and including, 1.2.0. This is due to missing nonce validation on the settings page and insufficient input sanitization and output escaping on the 'login_register_login_post' parameter. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page via a forged request granted they can trick an administrator into performing an action such as clicking on a link."}, {"lang": "es", "value": "El plugin login_register para WordPress es vulnerable a falsificaci\u00f3n de petici\u00f3n en sitios cruzados a cross-site scripting almacenado en todas las versiones hasta la 1.2.0, inclusive. Esto se debe a la falta de validaci\u00f3n de nonce en la p\u00e1gina de configuraci\u00f3n y a la sanitizaci\u00f3n de entrada y escape de salida insuficientes en el par\u00e1metro 'login_register_login_post'. Esto hace posible que atacantes no autenticados inyecten scripts web arbitrarios en p\u00e1ginas que se ejecutar\u00e1n cada vez que un usuario acceda a una p\u00e1gina inyectada a trav\u00e9s de una petici\u00f3n falsificada, siempre que puedan enga\u00f1ar a un administrador para que realice una acci\u00f3n como hacer clic en un enlace."}], "id": "CVE-2026-1503", "lastModified": "2026-06-17T10:15:57.513", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-1503", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-23T15:07:36.684367Z", "version": "2.0.3"}}]}, "published": "2026-03-21T04:16:53.750", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/login-register/tags/1.2.0/login_register_admin.php#L12"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/login-register/tags/1.2.0/login_register_admin.php#L14"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/login-register/tags/1.2.0/login_register_admin.php#L69"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/8c82d209-3c69-4d6e-a129-d519f6601540?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-352"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.2.0]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Plugin Name: login_register", "source": "cna", "vendor": "frankkoenen"}, "product": "plugin_name:_login_register", "vendor": "frankkoenen"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": null}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "wordpress", "vendor": "wordpress"}], "analysis": {"en": {"generated_at": "2026-03-21T07:36:33.697707+00:00", "value": {"mitigation_remediation": ["Update the login_register plugin to a version newer than 1.2.0, which includes proper nonce validation and input sanitization.", "If an upgrade cannot be performed immediately, disable or uninstall the plugin to remove the attack surface.", "After updating or reinstalling, verify that no malicious scripts remain in the plugin\u2019s settings and that all stored inputs are correctly escaped."], "summary": {"action": "Patch", "impact": "Stored Cross\u2011Site XSS via CSRF"}, "threat_synthesis": {"affected_systems": "WordPress installations that have the frankkoenen login_register plugin with a version of 1.2.0 or earlier running are affected. The vulnerability is triggered when the insecure settings page is accessed, so sites that have enabled the plugin\u2019s settings editing must be considered vulnerable.", "description_and_impact": "The login_register plugin for WordPress contains missing nonce validation on its settings page together with insufficient sanitization and escaping of the login_register_login_post input. This flaw enables a Cross\u2011Site Request Forgery that can store arbitrary JavaScript in the site\u2019s configuration. An attacker can craft a request that, when an administrator clicks a malicious link, writes malicious code into the plugin\u2019s settings. The code is then served to any visitor who accesses the affected page, allowing defacement, cookie theft, or other client\u2011side compromise.", "risk_and_exploitability": "The CVSS score of 4.3 indicates moderate severity. Exploitation requires no prior authentication and only a simple social\u2011engineering step \u2013 persuading an administrator to click a forged link. Because the vulnerability is not listed in the KEV catalog and EPSS data are unavailable, the probability of exploitation is uncertain, but the potential impact on all visitors to the compromised page remains significant for systems lacking robust admin awareness training."}}}}, "created": "2026-03-23T09:50:16.963750+00:00", "updated": "2026-03-25T14:41:57.017049+00:00", "vendors": ["frankkoenen", "frankkoenen$PRODUCT$plugin_name:_login_register", "wordpress", "wordpress$PRODUCT$wordpress"]}