Featherplugins vulnerabilities
We track 2 vulnerabilities in Featherplugins products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 31, 2023.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest Featherplugins vulnerabilities
- 8.8 High severity
Custom Login Page | Temporary Users | Rebrand…: Cross-Site Request Forgery
The Feather Login Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions starting from 1.0.7 up to, and including, 1.1.1. This is due to missing nonce validation in the 'createTempAccountLink' function. This makes it possible for una
- 8.8 High severity
Custom Login Page | Temporary Users | Rebrand…: Missing Authorization
The Feather Login Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getListOfUsers' function in versions starting from 1.0.7 up to, and including, 1.1.1. This makes it possible for authenticated at