PT-2026-64159

The WPO365 | Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 43.2. This is due to the Ajax Service::verify ajax request helper gating its wp verify nonce call behind the boolean option 'enable nonce check', which is absent from the default...

CVE-2023-34172

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Miled WordPress Social Login plugin = 3.0.4 versions...