CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2021/08/02 9:15 p.m.•19 views

CVE-2021-34628

The Admin Custom Login WordPress plugin is vulnerable to Cross-Site Request Forgery due to the loginbgSave action found in the /includes/Login-form-setting/Login-form-background.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.2.7...

8.8CVSS7.3AI score0.007EPSS

SaveExploits2References2

Prion•added 2021/08/02 9:15 p.m.•30 views

Cross site request forgery (csrf)

6.8CVSS8.5AI score0.007EPSS

SaveExploits2References2Affected Software1

Positive Technologies•added 2021/08/02 12:00 a.m.•6 views

PT-2021-20595

Name of the Vulnerable Software and Affected Versions: Admin Custom Login WordPress plugin versions up to and including 3.2.7 Description: The issue is related to Cross-Site Request Forgery, allowing attackers to inject arbitrary web scripts due to the loginbgSave action found in the...

8.8CVSS0.007EPSS

SaveExploits2References7

Rapid7 Vulnerability Database (full)•added 2021/08/02 12:00 a.m.•8 views

CVE-2021-34628: Cross-Site Request Forgery (CSRF)

8.8CVSS5.7AI score0.007EPSS

SaveExploits2References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by