CVE-2015-9322

The erident-custom-login-and-dashboard plugin before 3.5 for WordPress has CSRF...

CVE-2015-9322

The CVE concerns the WordPress plugin erident-custom-login-and-dashboard (before version 3.5), where CSRF is reported. Multiple connected sources corroborate CSRF as the underlying issue (CVE entry, Red Hat advisory, CNVD, CVE List, CVE record). The NVD details show CVSS scores: CVSS v2 base 6.8 ...

PT-2019-7281

Name of the Vulnerable Software and Affected Versions erident-custom-login-and-dashboard plugin versions prior to 3.5 Description The issue affects the erident-custom-login-and-dashboard plugin for WordPress, allowing for CSRF attacks. Recommendations For versions prior to 3.5, update to version...

CVE-2015-9322: Cross-Site Request Forgery (CSRF)

The erident-custom-login-and-dashboard plugin before 3.5 for WordPress has CSRF...

WordPress Admin Custom Login 2.4.5.2 Cross Site Scripting

------------------------------------------------------------------------ Admin Custom Login WordPress plugin affected by persistent Cross-Site Scripting via Logo URL field ------------------------------------------------------------------------ Burak Kelebek, July 2016...

WordPress Erident Custom and Dashboard Plugin Cross-Site Scripting Vulnerabilities

WordPress is a blogging platform developed in PHP, which supports personal blog sites on PHP and MySQL servers.Erident Custom Login is a plugin to customize the login screen of the WordPress console.The WordPress Dashboard is the first page you see after logging in to the backend. The first page...

Erident Custom Login & Dashboard 3.4-3.4.1 - Stored Cross-Site Scripting (XSS)

The Erident Custom Login and Dashboard plugin exposes a call to the updateoption method, when a specific POST field is posted to the plugins setting screen. No CSRF token is used, and as such if an Administrative user can be tricked into visiting a site with a malicious form, it is possible to...

Erident Custom Login & Dashboard 3.4-3.4.1 - Stored Cross-Site Scripting (XSS)

The Erident Custom Login and Dashboard plugin exposes a call to the updateoption method, when a specific POST field is posted to the plugins setting screen. No CSRF token is used, and as such if an Administrative user can be tricked into visiting a site with a malicious form, it is possible to...