Lucene search
K

69 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2015-7584

Malware in sbrugna...

6.5CVSS6.2AI score0.01383EPSS
Exploits3References6
Patchstack
Patchstack
added 2025/09/28 12:7 p.m.4 views

WordPress WordPress Social Login and Register plugin <= 7.7.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by dutafi in WordPress Plugin WordPress Social Login and Register versions = 7.7.0...

9.8CVSS7AI score0.00405EPSS
Exploits0Affected Software1
GithubExploit
GithubExploit
added 2025/07/28 8:5 p.m.604 views

Exploit for CVE-2025-34077

CVE-2025-34077 Unauthenticated Admin Session Hijack - Pie Regist...

10CVSS6.4AI score0.09903EPSS
Exploits7
Cvelist
Cvelist
added 2025/07/09 12:49 a.m.16 views

CVE-2025-34077 WordPress Pie Register Plugin ≤ 3.7.1.4 Authentication Bypass RCE

An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting socialsite=true and manipulating the useridsocialsite parameter,...

10CVSS0.09903EPSS
Exploits7References6
EUVD
EUVD
added 2025/07/09 12:49 a.m.12 views

EUVD-2025-20764

An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting socialsite=true and manipulating the useridsocialsite parameter,...

10CVSS8AI score0.09903EPSS
Exploits7References6
CVE
CVE
added 2025/07/09 12:49 a.m.98 views

CVE-2025-34077

Summary (CVE-2025-34077) : The WordPress Pie Register plugin (versions ≤ 3.7.1.4) contains an authentication bypass that allows unauthenticated attackers to impersonate any user by sending a crafted POST to the login endpoint, using social_site=true and manipulating user_id_social_site to generat...

10CVSS8.1AI score0.09903EPSS
Exploits7References6
CNNVD
CNNVD
added 2025/05/23 12:0 a.m.3 views

WordPress plugin WordPress Social Login and Register 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A security vulnerability...

8.1CVSS7.6AI score0.00434EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 8:17 a.m.13 views

CVE-2019-15659

The pie-register plugin before 3.1.2 for WordPress has SQL injection, a different issue than CVE-2018-10969...

9.8CVSS7.6AI score0.0533EPSS
Exploits5References1
Patchstack
Patchstack
added 2025/05/21 11:57 a.m.9 views

WordPress Social Login and Register plugin <= 7.6.10 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by LVT-tholv2k in WordPress Plugin WordPress Social Login and Register versions = 7.6.10...

8.1CVSS6.7AI score0.00434EPSS
Exploits0Affected Software1
CVE
CVE
added 2025/03/05 11:22 a.m.46 views

CVE-2024-11951

CVE-2024-11951 affects the WordPress plugin “Homey Login Register.” The issue: unauthenticated users who register new accounts can set their own role, enabling privilege escalation to administrator. Affected versions: up to and including 2.4.0. Exploitation details are not provided in the initial...

9.8CVSS7.6AI score0.00405EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/02/20 5:18 p.m.6 views

WordPress Pie Register plugin <= 3.8.4 - Sensitive Information Exposure via Log Files vulnerability

Sensitive Information Exposure via Log Files vulnerability discovered by wesley wcraft in WordPress Plugin Pie Register versions = 3.8.4...

7.5CVSS7AI score0.00468EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/23 12:0 a.m.5 views

PT-2025-4930 · Mohsin Khan · Wp Front-End Login/Register

Name of the Vulnerable Software and Affected Versions: Mohsin khan WP Front-end login and register versions prior to 2.1.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This problem affects th...

7.1CVSS9.2AI score0.00246EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/01/23 12:0 a.m.4 views

WordPress plugin WP Front-end login and register 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

7.1CVSS7.4AI score0.00246EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.3 views

WordPress plugin WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin WordPre...

5.3CVSS8.6AI score0.0073EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/05/24 12:0 a.m.3 views

WordPress plugin Pie Register 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

9.8CVSS6.7AI score0.00581EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/05/17 6:40 a.m.21 views

CVE-2023-26009 WordPress Houzez Login Register plugin <= 2.6.3 - Privilege Escalation

Improper Privilege Management vulnerability in Favethemes Houzez Login Register allows Privilege Escalation.This issue affects Houzez Login Register: from n/a through 2.6.3...

9.8CVSS9.5AI score0.0273EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/05/17 12:0 a.m.3 views

WordPress plugin WordPress Social Login and Register 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8CVSS6.7AI score0.00479EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/03/02 12:0 a.m.3 views

WordPress Plugin Nextend Social Login and Register Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.4CVSS8.1AI score0.00373EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/06/29 1:56 a.m.14 views

CVE-2023-2982

The WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4. This is due to insufficient encryption on the user being supplied during a login validated through the plugin. This makes...

9.8CVSS7.3AI score0.46947EPSS
Exploits4References5
CNNVD
CNNVD
added 2023/06/29 12:0 a.m.11 views

WordPress plugin Social Login and Register 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A security vulnerability exists in WordPres...

9.8CVSS8.6AI score0.46947EPSS
Exploits4References8
Rows per page
Query Builder