CVE-2015-9322

The CVE concerns the WordPress plugin erident-custom-login-and-dashboard (before version 3.5), where CSRF is reported. Multiple connected sources corroborate CSRF as the underlying issue (CVE entry, Red Hat advisory, CNVD, CVE List, CVE record). The NVD details show CVSS scores: CVSS v2 base 6.8 ...

CVE-2021-24658

The CVE-2021-24658 entry concerns the WordPress plugin Erident Custom Login and Dashboard (before 3.5.9). The vulnerability arises from improper sanitisation of the plugin’s settings, enabling authenticated stored XSS by high-privilege users, even when the unfiled_html setting is disabled. Docume...