hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2018-1999004 via org.jenkins-ci.main:jenkins-core (1.513)

org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...

hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2018-1000194 via org.jenkins-ci.main:jenkins-core (1.513)

org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...

hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2018-1000195 via org.jenkins-ci.main:jenkins-core (1.513)

org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...

hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2019-1003050 via org.jenkins-ci.main:jenkins-core (1.513)

org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...

hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2018-6356 via org.jenkins-ci.main:jenkins-core (1.513)

org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...

hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.513)

org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...

hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2018-1999001 via org.jenkins-ci.main:jenkins-core (1.513)

org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...

hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2018-1999003 via org.jenkins-ci.main:jenkins-core (1.513)

org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...

CVE-2022-0593

The Login with phone number WordPress plugin before 1.3.7 includes a file delete.php with no form of authentication or authorization checks placed in the plugin directory, allowing unauthenticated user to remotely delete the plugin files leading to a potential Denial of Service situation...

CVE-2021-24998

The Simple JWT Login WordPress plugin before 3.3.0 can be used to create new WordPress user accounts with a randomly generated password. The password is generated using the strshuffle PHP function that "does not generate cryptographically secure values, and should not be used for cryptographic...

CVE-2021-43409

The “WPO365 | LOGIN” WordPress plugin up to and including version 15.3 by wpo365.com is vulnerable to a persistent Cross-Site Scripting XSS vulnerability also known as Stored or Second-Order XSS. Persistent XSS vulnerabilities occur when the application stores and retrieves client supplied data...

WordPress Cross-Site Request Forgery Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An Access Control Error vulnerability exists in the WordPress Simple JWT Login plugin in versions prior to...

CVE-2021-34628

The Admin Custom Login WordPress plugin is vulnerable to Cross-Site Request Forgery due to the loginbgSave action found in the /includes/Login-form-setting/Login-form-background.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.2.7...

WordPress Microsoft Office 365 / Azure AD | LOGIN plugin <= 11.6 - JWT Signature Verification Bypass vulnerability

JWT Signature Verification Bypass vulnerability found by Philip Akesson in WordPress Microsoft Office 365 / Azure AD | LOGIN plugin versions = 11.6. Solution Update the WordPress Microsoft Office 365 / Azure AD | LOGIN plugin to the latest available version at least 11.7...

CVE-2020-6753

The Login by Auth0 plugin before 4.0.0 for WordPress allows stored XSS on multiple pages, a different issue than CVE-2020-5392...

CVE-2020-7947

An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. It has numerous fields that can contain data that is pulled from different sources. One issue with this is that the data isn't sanitized, and no input validation is performed, before the exporting of the user data...

WordPress wps-hide-login plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wps-hide-login is a hide-login plugin used in it. A cross-site request forgery vulnerability exists in versions of the...

CVE-2019-15826

The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field...

CVE-2015-9336

The clean-login plugin before 1.5.1 for WordPress has reflected XSS...

WordPress social-login-bws plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. social-login-bws plugin is a social networking site login plugin used in it. A cross-site scripting vulnerability exists in WordPress...