CVE-2020-6753

The Login by Auth0 plugin before 4.0.0 for WordPress allows stored XSS on multiple pages, a different issue than CVE-2020-5392...

CVE-2020-7947

An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. It has numerous fields that can contain data that is pulled from different sources. One issue with this is that the data isn't sanitized, and no input validation is performed, before the exporting of the user data...

WordPress wps-hide-login plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wps-hide-login is a hide-login plugin used in it. A cross-site request forgery vulnerability exists in versions of the...

CVE-2019-15826

The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field...

CVE-2015-9336

The clean-login plugin before 1.5.1 for WordPress has reflected XSS...

WordPress social-login-bws plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. social-login-bws plugin is a social networking site login plugin used in it. A cross-site scripting vulnerability exists in WordPress...

WordPress WPS Limit Login plugin <= 1.4.5 - Stored Cross-Site Scripting (XSS) and Protection Bypass vulnerabilities

Stored Cross-Site Scripting XSS and Protection Bypass vulnerabilities found by Julio Potier in WordPress WPS Limit Login plugin versions = 1.4.5. Solution Update the WordPress WPS Limit Login plugin to the latest available version at least 1.4.6...

WordPress ajax-bootmodal-login plugin input validation vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . ajax-bootmodal-login plugin is used in one of the user login plugin . An input validation vulnerability exis...

CloudBees Jenkins Google Login Plugin Redirection Vulnerability

CloudBees Jenkins is a set of Java-based continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks.Google Login Plugin is used in one of the support for the use of Google accounts to log in to Jenkins...

CloudBees Jenkins Google Login Plugin Session Fixation Vulnerability

CloudBees Jenkins is a set of Java-based continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks.Google Login Plugin is used in one of the support for the use of Google accounts to log in to Jenkins...

CVE-2018-1000174

An open redirect vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows attackers to redirect users to an arbitrary URL after successful login...

CVE-2018-1000173

A session fixaction vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows unauthorized attackers to impersonate another user if they can control the pre-authentication session...

Open redirect

An open redirect vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows attackers to redirect users to an arbitrary URL after successful login...

CVE-2018-1000174

An open redirect vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows attackers to redirect users to an arbitrary URL after successful login...

CVE-2018-1000174

The CVE-2018-1000174 issue affects Jenkins Google Login Plugin ≤ 1.3, in GoogleOAuth2SecurityRealm.java, enabling an open redirect to an arbitrary URL after login. The root cause is improper redirection handling, leading to potential user redirection to attacker-controlled sites. SUSE/GHSA/OSV re...

CVE-2018-1000173

A session fixaction vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows unauthorized attackers to impersonate another user if they can control the pre-authentication session...

CVE-2018-1000173

CVE-2018-1000173 describes a session-fixation vulnerability in Jenkins Google Login Plugin (1.3 and older) via GoogleOAuth2SecurityRealm.java, allowing an attacker to impersonate another user if they can control the pre-authentication session. Several connected sources corroborate the issue and i...

CVE-2017-8875

CSRF in the Clean Login plugin before 1.8 for WordPress allows remote attackers to change the login redirect URL or logout redirect URL...

Cross site request forgery (csrf)

CSRF in the Clean Login plugin before 1.8 for WordPress allows remote attackers to change the login redirect URL or logout redirect URL...

WordPress Clean Login Plugin CSRF Vulnerability

WordPress "Clean Login" is a front-end login and registration plugin. WordPress Clean Login plugin suffers from a CSRF vulnerability, which can be exploited by remote attackers to change wordpress login redirect url to other malicious addresses...