WordPress plugin LoginPress Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress LoginPress Pro plugin < 3.0.0 - Unauth. License Activation/Deactivation vulnerability

Unauth. License Activation/Deactivation vulnerability discovered by Dave Jong Patchstack in WordPress Plugin LoginPress Pro versions 3.0.0...

WordPress LoginPress Pro plugin < 3.0.0 - Captcha Bypass vulnerability

Captcha Bypass vulnerability discovered by Dave Jong Patchstack in WordPress Plugin LoginPress Pro versions 3.0.0...

WordPress LoginPress Pro Plugin < 3.0.0 is vulnerable to Bypass Vulnerability

Software LoginPress Pro Type Plugin Vulnerable versions 3.0.0 Fixed in 3.0.0 OWASP Top 10 A5: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2024-32676 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID c97f3e50718a Credits Dave Jong Patchstack Required...

WordPress LoginPress Pro Plugin < 3.0.0 is vulnerable to Settings Change

Software LoginPress Pro Type Plugin Vulnerable versions 3.0.0 Fixed in 3.0.0 OWASP Top 10 A1: Broken Access Control Classification Settings Change CVE CVE-2024-32677 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4886360ccb57 Credits Dave Jong Patchstack Required privileg...

WPBrigade LoginPress Plugin for WordPress < 1.5.12 Reflected Cross-Site Scripting

The WordPress WPBrigade LoginPress Plugin installed on the remote host is affected by a Reflected Cross-Site Scripting XSS vulnerability in the redirect-page attribute. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version...

WPBrigade LoginPress Plugin for WordPress < 1.6.3 Broken Access Control

The Wordpress WPBrigade LoginPress Plugin installed on the remote host is affected by a Broken Access Control vulnerability leading to unauth. changing of Opt-In or Opt-Out tracking settings. Note that the scanner has not tested for these issues but has instead relied only on the application's...

WordPress LoginPress Plugin < 1.6.3 Access Control Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2022-41839

Broken Access Control vulnerability in WordPress LoginPress plugin = 1.6.2 on WordPress leading to unauth. changing of Opt-In or Opt-Out tracking settings...

CVE-2022-41839

Broken Access Control vulnerability in WordPress LoginPress plugin = 1.6.2 on WordPress leading to unauth. changing of Opt-In or Opt-Out tracking settings...

Improper access control

Broken Access Control vulnerability in WordPress LoginPress plugin = 1.6.2 on WordPress leading to unauth. changing of Opt-In or Opt-Out tracking settings...

CVE-2022-41839 WordPress LoginPress plugin <= 1.6.2 - Broken Access Control vulnerability

Broken Access Control vulnerability in WordPress LoginPress plugin = 1.6.2 on WordPress leading to unauth. changing of Opt-In or Opt-Out tracking settings...

CVE-2022-41839

CVE-2022-41839 affects the WordPress LoginPress plugin (versions ≤ 1.6.2). The issue is a Broken Access Control that allows unauthorized changes to Opt-In/Opt-Out tracking settings. The published sources consistently describe unauthenticated modification of tracking preferences as the impact. Rem...

WordPress plugin LoginPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2022-26091 · WordPress · Wordpress Loginpress

Name of the Vulnerable Software and Affected Versions: WordPress LoginPress plugin versions 1.6.2 and earlier Description: A Broken Access Control issue exists, allowing unauthorized changes to Opt-In or Opt-Out tracking settings. Recommendations: For WordPress LoginPress plugin versions 1.6.2 an...

WordPress LoginPress plugin <= 1.6.2 - Broken Access Control vulnerability

Broken Access Control vulnerability leading to unauth. changing of Opt-In or Opt-Out tracking settings discovered by Nguyen Anh Tien Patchstack Alliance in the WordPress LoginPress plugin versions = 1.6.2. Solution Update the WordPress LoginPress plugin to the latest available version at least...

LoginPress < 1.6.3 - Unauthenticated Settings Update

The plugin does not have authorisation and CSRF checks when updating its Opt-In and Opt-Out tracking settings, which could allow any unauthenticated users to update them...

WordPress LoginPress Plugin < 1.5.12 XSS Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

WordPress LoginPress Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress LoginPress Plugin versions prior to 1.5.12, which ste...

CVE-2022-0347

The LoginPress | Custom Login Page Customizer WordPress plugin before 1.5.12 does not escape the redirect-page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting...