LoginPress | wp-login Custom Login Page Customizer vulnerabilities
1 known vulnerability in LoginPress | wp-login Custom Login Page Customizer from Hiddenpearls. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
LoginPress | wp-login Custom Login Page…: Cross-Site Request Forgery
The LoginPress | wp-login Custom Login Page Customizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.1. This is due to missing or incorrect nonce validation on the 'custom_plugin_set_option' function