2 matches found
CVE-2019-15872
The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings.
CVE-2019-15871
The LoginPress plugin before 1.1.4 for WordPress has no capability check for updates to settings.