EUVD-2007-5087

Malware in sbrugna...

CVE-2024-13794: Protection Mechanism Failure

The WP Ghost Hide My WP Ghost – Security & Firewall plugin for WordPress is vulnerable to Login Page Dislcosure in all versions up to, and including, 5.3.02. This is due to the plugin not properly restricting the /wp-register.php path. This makes it possible for unauthenticated attackers to...

WordPress plugin "SiteGuard WP Plugin" may leak the customized path to the login page

Overview WordPress plugin "SiteGuard WP Plugin" provided by EG Secure Solutions Inc. provides a functionality to customize the path to the login page wp-login.php. The plugin implements a measure to avoid redirection from other URLs, but missed to implement a measure to avoid redirection from...

CVE-2024-37881: Insertion of Sensitive Information Into Sent Data

SiteGuard WP Plugin provides a functionality to customize the path to the login page wp-login.php and implements a measure to avoid redirection from other URLs. However, SiteGuard WP Plugin versions prior to 1.7.7 missed to implement a measure to avoid redirection from wp-register.php. As a resul...

Wordpress 1.5.1 - 2.0.2 wp-register.php Multiple Parameter XSS

...

Cross site scripting

Cross-site scripting XSS vulnerability in wp-register.php in WordPress 2.0 and 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the useremail parameter...

CVE-2007-5106

Cross-site scripting XSS vulnerability in wp-register.php in WordPress 2.0 allows remote attackers to inject arbitrary web script or HTML via the userlogin parameter...

CVE-2007-5106

Cross-site scripting XSS vulnerability in wp-register.php in WordPress 2.0 allows remote attackers to inject arbitrary web script or HTML via the userlogin parameter...

CVE-2007-5106

CVE-2007-5106 describes an XSS vulnerability in WordPress 2.0 related to wp-register.php where an attacker can inject arbitrary script/HTML via the user_login parameter. The issue is documented across multiple sources (NVD/Ubuntu/Debian/OSV and WPVulnDB) with the affected component being WordPres...

CVE-2007-5105

CVE-2007-5105 is a Cross-site Scripting (XSS) flaw in WordPress versions 2.0 and 2.0.1, exploitable via the user_email parameter in wp-register.php. The underlying issue is a script/HTML injection vulnerability that remote attackers can trigger, as documented across multiple sources (WordPress wp...

CVE-2007-5105: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wp-register.php in WordPress 2.0 and 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the useremail parameter...

CVE-2007-5106: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wp-register.php in WordPress 2.0 allows remote attackers to inject arbitrary web script or HTML via the userlogin parameter...

Vulnerabilities в WordPress 2.0

Здравствуйте 3APA3A! Сообщаю вам о найденных мною 03.11.2006 Cross-Site Scripting уязвимостях в движке WordPress 2.0. Уязвимости в скрипте wp-register.php. XSS: POST запрос на странице http://site/wp-register.php: "scriptalertdocument.cookie/script В полях: Имя пользователя и E-Mail. Дополнительн...