Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/03/15 4:46 a.m.•36 views

CVE-2024-13836

The WP Login Control WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS6AI score0.00273EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/11 6:15 a.m.•22 views

CVE-2024-13836

The WP Login Control WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS0.00273EPSS
SaveExploits1References1
CVE
CVE
•added 2025/03/11 6:00 a.m.•68 views

CVE-2024-13836

The WP Login Control WordPress plugin, affecting versions through 2.0.0 , is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The root cause is the failure to sanitise and escape a specific parameter before outputting it back to the page. This vulnerability could be exploited to target ...

7.1CVSS6.2AI score0.00273EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/11 6:00 a.m.•15 views

CVE-2024-13836 WP Login Control <= 2.0.0 - Reflected XSS

The WP Login Control WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.4AI score0.00273EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/11 6:00 a.m.•36 views

CVE-2024-13836 WP Login Control <= 2.0.0 - Reflected XSS

The WP Login Control WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.00273EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/11 12:00 a.m.•4 views

CVE-2024-13836: Improper Neutralization of Input During Web Page Generation

The WP Login Control WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS5.8AI score0.00273EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•15 views

WordPress plugin WP Login Control 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

7.1CVSS8.3AI score0.00273EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/03/11 12:00 a.m.•3 views

PT-2025-10694

Name of the Vulnerable Software and Affected Versions WP Login Control versions prior to 2.0.1 is not specified, however, the version 2.0.0 is mentioned as vulnerable, so we can say: WP Login Control versions 2.0.0 and earlier Description The issue is related to a Reflected Cross-Site Scripting,...

7.1CVSS0.00273EPSS
SaveExploits1References8
Rows per page
Query Builder