86 matches found
CVE-2023-49861
Missing Authorization vulnerability in socialmediafeather Social Media Feather social-media-feather allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Media Feather: from n/a through = 2.1.3...
CVE-2025-62107
Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page feather-login-page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through = 1.1.7...
CVE-2025-62107
Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page feather-login-page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through = 1.1.7...
CVE-2025-62107 WordPress Feather Login Page plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page feather-login-page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through = 1.1.7...
EUVD-2025-204705
Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through 1.1.7...
CVE-2025-62107
This CVE concerns a Cross-Site Request Forgery (CSRF) vulnerability in the PluginOps Feather Login Page for WordPress, affecting versions up to 1.1.7. The underlying issue allows an attacker to perform actions on behalf of an authenticated user on Feather Login Page. Concrete affected item: Feath...
CVE-2025-62107 WordPress Feather Login Page plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page feather-login-page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through = 1.1.7...
WordPress plugin Feather Login Page 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...
PT-2025-52639
Name of the Vulnerable Software and Affected Versions PluginOps Feather Login Page versions through 1.1.7 Description A Cross-Site Request Forgery CSRF issue exists in PluginOps Feather Login Page. This allows attackers to perform actions on behalf of an unsuspecting user. Recommendations Update...
WordPress Feather Login Page plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by daroo in WordPress Plugin Feather Login Page versions = 1.1.7...
EUVD-2021-23424
Malware in sbrugna...
EUVD-2024-29781
Malicious code in bioql PyPI...
EUVD-2023-34024
Malicious code in bioql PyPI...
EUVD-2023-53769
Malicious code in bioql PyPI...
EUVD-2022-7140
Malicious code in bioql PyPI...
CVE-2024-31923
Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page.This issue affects Feather Login Page: from n/a through 1.1.5...
CVE-2023-2547
The Feather Login Page plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'deleteUser' function in versions starting from 1.0.7 up to, and including, 1.1.1. This makes it possible for authenticated attackers, with subscriber-level permissions...
CVE-2023-2545
The Feather Login Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getListOfUsers' function in versions starting from 1.0.7 up to, and including, 1.1.1. This makes it possible for authenticated attackers, with subscriber-level...
MAL-2025-3682 Malicious code in feather-provider-filter (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c10e095a2bc88b96e5a1f9fabb7eefe0ff0596b0e3b3bf085fdcf95165c4689 Any computer that has this package installed or running should be considered...
Malicious code in feather-provider-filter (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c10e095a2bc88b96e5a1f9fabb7eefe0ff0596b0e3b3bf085fdcf95165c4689 Any computer that has this package installed or running should be considered...