CVE-2017-8875

The CVE-2017-8875 entry concerns the Clean Login plugin for WordPress prior to version 1.8. An explicit CSRF vulnerability allows remote attackers to modify the login/logout redirect URLs. The issue targets the plugin’s CSRF protection around the redirect URL settings (as evidenced by PoC in WPEX...