Lucene search
+L

258 matches found

RedhatCVE
RedhatCVE
added 2025/05/07 6:31 a.m.16 views

CVE-2025-39363

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Stored XSS.This issue affects Custom Login and Registration: from n/a through 1.0.0...

6.5CVSS6.1AI score0.00207EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/05 6:15 a.m.9 views

CVE-2025-39363

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Stored XSS.This issue affects Custom Login and Registration: from n/a through 1.0.0...

5.4CVSS5.8AI score0.00207EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/05 6:15 a.m.32 views

CVE-2025-39363

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Stored XSS.This issue affects Custom Login and Registration: from n/a through 1.0.0...

6.5CVSS0.00207EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/05 6:10 a.m.18 views

CVE-2025-39363 WordPress Custom Login and Registration <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Stored XSS.This issue affects Custom Login and Registration: from n/a through 1.0.0...

6.5CVSS6.8AI score0.00207EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/05 6:10 a.m.89 views

CVE-2025-39363

CVE-2025-39363 affects the WordPress plugin Custom Login and Registration (versions

6.5CVSS6.5AI score0.00207EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/05/05 6:10 a.m.39 views

CVE-2025-39363 WordPress Custom Login and Registration <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Stored XSS.This issue affects Custom Login and Registration: from n/a through 1.0.0...

6.5CVSS0.00207EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/05 12:00 a.m.12 views

WordPress plugin Custom Login and Registration 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS6.5AI score0.00207EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/05/05 12:00 a.m.15 views

PT-2025-19343 · Unknown · Alphaefficiencyteam Custom Login/Registration

Name of the Vulnerable Software and Affected Versions: AlphaEfficiencyTeam Custom Login and Registration versions n/a through 1.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This...

6.5CVSS6.6AI score0.00207EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/04/27 8:55 a.m.28 views

CVE-2025-46535

Missing Authorization vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Login and Registration: from n/a through 1.0.0...

5.4CVSS8.5AI score0.0026EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/04/25 8:15 a.m.9 views

CVE-2025-46535

Missing Authorization vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Login and Registration: from n/a through 1.0.0...

5.4CVSS8.5AI score0.0026EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/04/25 8:05 a.m.8 views

CVE-2025-46535 WordPress Custom Login and Registration plugin <= 1.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Login and Registration: from n/a through 1.0.0...

5.4CVSS7.2AI score0.0026EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/25 8:05 a.m.79 views

CVE-2025-46535

CVE-2025-46535 concerns WordPress plugin “Custom Login and Registration” (MS-Registration) versions up to 1.0.0. The issue is described as a Missing Authorization vulnerability allowing exploitation of incorrectly configured access control. Public sources in the Connected Documents confirm the vu...

5.4CVSS8.5AI score0.0026EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/25 12:00 a.m.9 views

WordPress plugin Custom Login and Registration 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

5.4CVSS6.3AI score0.0026EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/04/25 12:00 a.m.13 views

PT-2025-17896 · Alphaefficiencyteam · Custom Login/Registration

Name of the Vulnerable Software and Affected Versions: AlphaEfficiencyTeam Custom Login and Registration versions 1.0.0 and earlier Description: The issue is related to a Missing Authorization vulnerability that allows exploiting incorrectly configured access control security levels. This affects...

5.4CVSS6.2AI score0.0026EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/04/06 2:20 p.m.25 views

CVE-2025-2798

The Woffice CRM theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.21. This is due to a misconfiguration of excluded roles during registration. This makes it possible for unauthenticated attackers to register with an Administrator role if a custom...

9.8CVSS6.8AI score0.0065EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/04 1:44 p.m.25 views

CVE-2025-2798 Woffice <= 5.4.21 - Authentication Bypass via Registration Role

The Woffice CRM theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.21. This is due to a misconfiguration of excluded roles during registration. This makes it possible for unauthenticated attackers to register with an Administrator role if a custom...

9.8CVSS7.1AI score0.0065EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/04/01 3:51 p.m.9 views

WordPress CLP – Custom Login Page by NiteoThemes plugin <= 1.5.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin CLP – Custom Login Page by NiteoThemes versions = 1.5.5...

4.3CVSS6.7AI score0.00205EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/04/01 3:16 p.m.7 views

CVE-2025-31769

Cross-Site Request Forgery CSRF vulnerability in NiteoThemes CLP – Custom Login Page by NiteoThemes clp-custom-login-page allows Cross Site Request Forgery.This issue affects CLP – Custom Login Page by NiteoThemes: from n/a through = 1.5.5...

4.3CVSS0.00205EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/01 2:51 p.m.22 views

CVE-2025-31769 WordPress CLP – Custom Login Page by NiteoThemes plugin <= 1.5.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in NiteoThemes CLP – Custom Login Page by NiteoThemes clp-custom-login-page allows Cross Site Request Forgery.This issue affects CLP – Custom Login Page by NiteoThemes: from n/a through = 1.5.5...

4.3CVSS0.00205EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 2:51 p.m.6 views

CVE-2025-31769 WordPress CLP – Custom Login Page by NiteoThemes plugin <= 1.5.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in NiteoThemes CLP – Custom Login Page by NiteoThemes clp-custom-login-page allows Cross Site Request Forgery.This issue affects CLP – Custom Login Page by NiteoThemes: from n/a through = 1.5.5...

4.3CVSS5.1AI score0.00205EPSS
SaveExploits0References1
Rows per page
Query Builder