18 matches found
CVE-2025-47646: Weak Password Recovery Mechanism for Forgotten Password
Weak Password Recovery Mechanism for Forgotten Password vulnerability in Gilblas Ngunte Possi PSW Front-end Login & Registration psw-login-and-registration allows Password Recovery Exploitation.This issue affects PSW Front-end Login & Registration: from n/a through = 1.13...
CVE-2025-3605: Authorization Bypass Through User-Controlled Key
The Frontend Login and Registration Blocks plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.1. This is due to the plugin not properly validating a user's identity prior to updating their details like email via the...
CVE-2025-39363
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Stored XSS.This issue affects Custom Login and Registration: from n/a through 1.0.0...
CVE-2025-39363 WordPress Custom Login and Registration <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Stored XSS.This issue affects Custom Login and Registration: from n/a through 1.0.0...
CVE-2025-39363: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Stored XSS.This issue affects Custom Login and Registration: from n/a through 1.0.0...
CVE-2025-46535: Missing Authorization
Missing Authorization vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Login and Registration: from n/a through 1.0.0...
CVE-2025-3607: Unverified Password Change
The Frontend Login and Registration Blocks plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.8. This is due to the plugin not properly validating a user's identity prior to updating a password. This makes it possible for...
CVE-2024-8874: Improper Neutralization of Input During Web Page Generation
The AJAX Login and Registration modal popup + inline form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.24. This makes it possible for unauthenticated attackers to...
CVE-2022-4532
The LOGIN AND REGISTRATION ATTEMPTS LIMIT plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.1. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supp...
CVE-2022-4532: Use of Less Trusted Source
The LOGIN AND REGISTRATION ATTEMPTS LIMIT plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.1. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supp...
CVE-2024-33918: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maxim K AJAX Login and Registration modal popup + inline form allows Stored XSS.This issue affects AJAX Login and Registration modal popup + inline form: from n/a through 2.23...
CVE-2022-47138
Cross-Site Request Forgery CSRF vulnerability in German Krutov LOGIN AND REGISTRATION ATTEMPTS LIMIT plugin = 2.1 versions...
CVE-2022-47138
Cross-Site Request Forgery CSRF vulnerability in German Krutov LOGIN AND REGISTRATION ATTEMPTS LIMIT plugin = 2.1 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in German Krutov LOGIN AND REGISTRATION ATTEMPTS LIMIT plugin = 2.1 versions...
CVE-2022-47138
The CVE CVE-2022-47138 references a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin LOGIN AND REGISTRATION ATTEMPTS LIMIT (German Krutov) for versions ≤ 2.1. Public sources describe: vulnerable condition is CSRF with unauthenticated user privilege required, exploitable ove...
CVE-2022-47138 WordPress LOGIN AND REGISTRATION ATTEMPTS LIMIT Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in German Krutov LOGIN AND REGISTRATION ATTEMPTS LIMIT plugin = 2.1 versions...
PT-2023-15183 · German Krutov · Login/Registration Attempts Limit
Name of the Vulnerable Software and Affected Versions: German Krutov LOGIN AND REGISTRATION ATTEMPTS LIMIT plugin versions = 2.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...