Browse CVEs

MEDIUM 5.3 CVE-2023-5845 The Simple Social Media Share Buttons WordPress plugin before 5.1.1 leaks password-protected post content to unauthenticated visitors in some meta ta… Simple Social Buttons 5.1.1+ Fix from $1,6002023-11-27 MEDIUM 5.4 CVE-2022-4622 The Login Logout Menu WordPress plugin through 1.3.3 does not validate and escape some of its shortcode attributes before outputting them back in a p… Login Logout Menu after 1.3.3 Fix from $1,6002023-02-21 MEDIUM 5.4 CVE-2022-4625 The Login Logout Menu WordPress plugin before 1.4.0 does not validate and escape some of its shortcode attributes before outputting them back in the … Login Logout Menu 1.4.0+ Fix from $1,6002023-01-23 MEDIUM 5.3 CVE-2022-41839 Broken Access Control vulnerability in WordPress LoginPress plugin <= 1.6.2 on WordPress leading to unauth. changing of Opt-In or Opt-Out tracking se… Loginpress after 1.6.2 Fix from $1,6002022-11-18 MEDIUM 6.1 CVE-2022-0347 The LoginPress | Custom Login Page Customizer WordPress plugin before 1.5.12 does not escape the redirect-page parameter before outputting it back in… Loginpress 1.5.12+ Fix from $1,6002022-03-07 MEDIUM 5.4 CVE-2021-24486 The Simple Social Media Share Buttons – Social Sharing for Everyone WordPress plugin before 3.2.3 did not escape the align and like_button_size param… Simple Social Media Share Buttons 3.2.3+ Fix from $1,6002021-08-23 CRITICAL 9.8 CVE-2019-15872 The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings. Loginpress 1.1.4+ Fix from $2,3002019-09-03