CVE-2023-2223

The CVE-2023-2223 entry concerns the WordPress plugin Login Rebuilder prior to version 2.8.1, which does not sanitize/escape certain settings. This allows high-privilege users (e.g., admins) to perform a Stored XSS, even when unfiltered_html is disallowed (such as in multisite). The root cause is...

CVE-2014-3882

CVE-2014-3882 affects the WordPress Login Rebuilder plugin prior to version 1.2.0. It is a Cross-Site Request Forgery (CSRF) vulnerability that could allow remote attackers to hijack the authentication of arbitrary users. A fixed release (1.2.3) was released around 2014-06-24/25, with advisories ...