CVE-2022-0232

The User Registration, Login & Landing Pages WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the loadertext parameter found in the /includes/templates/landing-page.php file which allows attackers with administrative user access to inject arbitrary we...

CVE-2022-0232: Improper Neutralization of Input During Web Page Generation

The User Registration, Login & Landing Pages WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the loadertext parameter found in the /includes/templates/landing-page.php file which allows attackers with administrative user access to inject arbitrary we...

PT-2022-13051

Name of the Vulnerable Software and Affected Versions User Registration, Login & Landing Pages WordPress plugin versions up to and including 1.2.7 Description The issue is related to Stored Cross-Site Scripting due to insufficient escaping via the loader text parameter found in the...

CVE-2015-7517: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Double Opt-In for Download plugin before 2.0.9 for WordPress allow remote attackers to execute arbitrary SQL commands via the ver parameter to 1 class-doifd-download.php or 2 class-doifd-landing-page.php in public/includes/...

PT-2017-7210

Name of the Vulnerable Software and Affected Versions Double Opt-In for Download plugin versions prior to 2.0.9 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ver parameter to specific API endpoints, including class-doifd-download.php and...