WordPress Clean Login Plugin CSRF Vulnerability

WordPress "Clean Login" is a front-end login and registration plugin. WordPress Clean Login plugin suffers from a CSRF vulnerability, which can be exploited by remote attackers to change wordpress login redirect url to other malicious addresses...

WordPress Clean Login Cross Site Request Forgery

=============== Software Description =============== Software:clean login version: a a a a a a a a a ========= Mitigations ================ Disable the plugin until a new version is released that fixes this bug. ========= Fixed ========= https://wordpress.org/plugins/clean-login/developers1.8...

WordPress Clean Login Cross Site Request Forgery Vulnerability

WordPress Clean Login plugin versions prior to 1.8 suffer from a cross site request forgery vulnerability. =============== Software Description =============== Software:clean login version: a a a a a a a a a ========= Mitigations ================ Disable the plugin until a new version is released...

Clean Login <= 1.7.12 - Change Redirect URL CSRF

The Clean Login WordPress plugin was affected by a Change Redirect URL CSRF security vulnerability. PoC...

Clean Login < 1.5.1 - Reflected XSS

The Clean Login WordPress plugin was affected by a Reflected XSS security vulnerability...