CVE-2024-5191

CVE-2024-5191 affects Branda – White Label WordPress, Custom Login Page Customizer for WordPress. It allows Stored XSS via the mime_types parameter in all versions up to 3.4.17, requiring authenticated access at Author level or higher. The impact is arbitrary script execution in pages viewed by u...

CVE-2024-6554

The CVE-2024-6554 entry for Branda – White Label WordPress, Custom Login Page Customizer indicates a Full Path Disclosure vulnerability in all versions up to 3.4.18. The root cause is the plugin using composer without preventing direct access to its files, enabling unauthenticated attackers to re...