CVE-2017-18514

The CVE-2017-18514 entry concerns the WordPress plugin simple-login-log, vulnerable prior to version 1.1.2. Multiple sources (NVD, Red Hat, CNVD, CVE lists) identify an SQL injection vulnerability in this plugin. The NVD entry lists CVSS metrics: CVSS v2 base score 7.5 (HIGH) with network attack ...

CVE-2017-18573

The CVE-2017-18573 entry concerns the WordPress plugin simple-login-log, vulnerable to SQL injection in versions before 1.1.2. The issue’s root cause is improper handling of SQL queries in the login-logging functionality, enabling an attacker to inject SQL commands. Several connected records (Red...