WordPress External Login plugin SQL Injection Vulnerability

The WordPress External Login plugin is mainly used to integrate WordPress login functionality with an external database system, allowing users to log in to the site directly through an external account. WordPress External Login plugin is prone to SQL injection vulnerability, which is caused by...

PT-2025-42308

Name of the Vulnerable Software and Affected Versions WordPress External Login plugin versions through 1.11.2 Description The External Login plugin for WordPress has a flaw that could expose sensitive information. The 'exlog test connection' AJAX action does not properly verify user permissions o...

PT-2025-42307

Name of the Vulnerable Software and Affected Versions WordPress External Login plugin versions 1.11.2 and earlier Description The External Login plugin for WordPress has a flaw that allows for SQL Injection through the log parameter. This occurs because of inadequate escaping of user-provided inp...