EUVD-2024-45541

Malicious code in bioql PyPI...

EUVD-2025-3224

Malicious code in bioql PyPI...

CVE-2025-23514

Missing Authorization vulnerability in Sanjay Prasad Loginplus loginplus allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Loginplus: from n/a through = 1.2...

CVE-2024-51782

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sanjay Prasad Loginplus loginplus allows Stored XSS.This issue affects Loginplus: from n/a through = 1.2...

CVE-2025-23514

Missing Authorization vulnerability in Sanjay Prasad Loginplus loginplus allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Loginplus: from n/a through = 1.2...

CVE-2025-23514 WordPress Loginplus plugin <= 1.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Sanjay Prasad Loginplus loginplus allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Loginplus: from n/a through = 1.2...

CVE-2025-23514

CVE-2025-23514 is a Missing Authorization issue in Loginplus (Sanjay Prasad) that allows accessing functionality not properly constrained by ACLs. Affected: Loginplus up to version 1.2 (no public patch/version beyond 1.2 provided in sources). Remediation not specified in the documents; upgrade to...

WordPress Loginplus plugin <= 1.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Loginplus versions = 1.2...

PT-2025-4919 · Sanjaysolutions · Sanjaysolutions Loginplus

Name of the Vulnerable Software and Affected Versions: Sanjaysolutions Loginplus versions n/a through 1.2 Description: The issue is related to a missing authorization vulnerability in Sanjaysolutions Loginplus, which allows accessing functionality not properly constrained by Access Control Lists...

WordPress plugin Loginplus 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2024-51782

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sanjay Prasad Loginplus loginplus allows Stored XSS.This issue affects Loginplus: from n/a through = 1.2...

CVE-2024-51782

CVE-2024-51782 – Stored XSS in Sanjaysolutions Loginplus (WordPress plugin) Allows stored cross-site scripting via user input during web page generation. Affected: Loginplus ≤ 1.2. CVSS v3.1 base score 7.1 (HIGH). Root cause: improper input neutralization leading to XSS. Exploitation status not d...

CVE-2024-51782 WordPress Loginplus plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sanjay Prasad Loginplus loginplus allows Stored XSS.This issue affects Loginplus: from n/a through = 1.2...

CVE-2024-51782 WordPress Loginplus plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sanjay Prasad Loginplus loginplus allows Stored XSS.This issue affects Loginplus: from n/a through = 1.2...

WordPress plugin Loginplus 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-34908 · Sanjaysolutions · Sanjaysolutions Loginplus

Name of the Vulnerable Software and Affected Versions: Sanjaysolutions Loginplus versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations:...

WordPress Loginplus plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Loginplus versions = 1.2...

WordPress Loginplus Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software Loginplus Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51782 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3789effcd64f Credits Mika Required privilege Unauthenticated...