Feather Login Page vulnerabilities

2 known vulnerabilities in Feather Login Page from Featherplugins. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Custom Login Page | Temporary Users | Rebrand…: Cross-Site Request Forgery

  CVE-2023-2549May 31, 2023Featherplugins

  The Feather Login Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions starting from 1.0.7 up to, and including, 1.1.1. This is due to missing nonce validation in the 'createTempAccountLink' function. This makes it possible for una

• 8.8 High severity

  Custom Login Page | Temporary Users | Rebrand…: Missing Authorization

  CVE-2023-2545May 31, 2023Featherplugins

  The Feather Login Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getListOfUsers' function in versions starting from 1.0.7 up to, and including, 1.1.1. This makes it possible for authenticated at