Lucene search
K

17 matches found

RedhatCVE
RedhatCVE
added 2025/11/07 3:54 p.m.1 views

CVE-2025-53245

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Afzal Multani WP Logo Changer am-login-logo allows Stored XSS.This issue affects WP Logo Changer: from n/a through = 1.2...

7.1CVSS6AI score0.00031EPSS
Exploits0References1
NVD
NVD
added 2025/11/06 4:15 p.m.2 views

CVE-2025-53245

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Afzal Multani WP Logo Changer am-login-logo allows Stored XSS.This issue affects WP Logo Changer: from n/a through = 1.2...

7.1CVSS0.00031EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/06 3:53 p.m.1 views

EUVD-2025-38000

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Afzal Multani WP Logo Changer am-login-logo allows Stored XSS.This issue affects WP Logo Changer: from n/a through = 1.2...

5.5AI score0.00031EPSS
Exploits0References2
CVE
CVE
added 2025/11/06 3:53 p.m.4 views

CVE-2025-53245

CVE-2025-53245 pertains to the WordPress plugin WP Logo Changer (am-login-logo) with versions up to and including 1.2. The vulnerability is Stored XSS caused by improper neutralization during web page generation, allowing injected scripts to persist in the affected pages. Multiple sources (NVD, R...

7.1CVSS5.6AI score0.00031EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/06 3:53 p.m.1 views

CVE-2025-53245 WordPress WP Logo Changer Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Afzal Multani WP Logo Changer am-login-logo allows Stored XSS.This issue affects WP Logo Changer: from n/a through = 1.2...

7.1CVSS5.6AI score0.00031EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/06 3:53 p.m.5 views

CVE-2025-53245 WordPress WP Logo Changer Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Afzal Multani WP Logo Changer am-login-logo allows Stored XSS.This issue affects WP Logo Changer: from n/a through = 1.2...

7.1CVSS0.00031EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.1 views

WordPress plugin WP Logo Changer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS5.8AI score0.00031EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.2 views

PT-2025-45221

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Afzal Multani WP Logo Changer am-login-logo allows Stored XSS.This issue affects WP Logo Changer: from n/a through = 1.2...

6AI score0.00031EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/06/07 3:3 p.m.3 views

WordPress WP Logo Changer Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WP Logo Changer versions = 1.2...

5.4CVSS6.2AI score0.00031EPSS
Exploits0Affected Software1
CNVD
CNVD
added 2021/12/18 12:0 a.m.21 views

WordPress WP Admin Logo Changer plugin cross-site request forgery vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WP Admin Logo Changer plugin is a WordPress open source application plugin. WordPress WP Admin Logo Changer plugin in version 1.0 and earlier has a cross-site request forgery vulnerability, which...

6.5CVSS1.6AI score0.0014EPSS
Exploits2References1
OSV
OSV
added 2021/12/13 11:15 a.m.0 views

CVE-2021-24784

The WP Admin Logo Changer WordPress plugin through 1.0 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin update them via a CSRF attack...

6.5CVSS6.6AI score
Exploits0References1
NVD
NVD
added 2021/12/13 11:15 a.m.14 views

CVE-2021-24784

The WP Admin Logo Changer WordPress plugin through 1.0 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin update them via a CSRF attack...

6.5CVSS0.0014EPSS
Exploits2References1
CVE
CVE
added 2021/12/13 10:40 a.m.39 views

CVE-2021-24784

The CVE concerns the WordPress plugin “WP Admin Logo Changer” (versions

6.5CVSS6.3AI score0.0014EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2021/12/13 10:40 a.m.19 views

CVE-2021-24784 WP Admin Logo Changer <= 1.0 - Plugin's Settings Update via CSRF

The WP Admin Logo Changer WordPress plugin through 1.0 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin update them via a CSRF attack...

6.6AI score0.0014EPSS
Exploits2References1
CNNVD
CNNVD
added 2021/12/13 12:0 a.m.1 views

WordPress 插件跨站请求伪造漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WP Admin Logo Changer plugin is a WordPress open source application plugin. WordPress WP Admin Logo Changer plugin in version 1.0 and earlier has a cross-site request forgery vulnerability, which...

6.5CVSS5.5AI score0.0014EPSS
Exploits2References2
wpexploit
wpexploit
added 2021/11/15 12:0 a.m.156 views

WP Admin Logo Changer <= 1.0 - Plugin's Settings Update via CSRF

The plugin does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin update them via a CSRF attack. csrf.submit...

6.5CVSS6.3AI score0.0014EPSS
Exploits2
Patchstack
Patchstack
added 2021/11/15 12:0 a.m.21 views

WordPress WP Admin Logo Changer plugin <= 1.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Plugin Settings Update

Cross-Site Request Forgery CSRF vulnerability leading to Plugin Settings Update discovered by apple502j in WordPress WP Admin Logo Changer plugin versions = 1.0. Solution Deactivate and delete. This plugin has been closed as of October 4, 2021 and is not available for download. This closure is...

6.5CVSS1.8AI score0.0014EPSS
Exploits2References3Affected Software1
Rows per page
Query Builder