TI-2024-10568 CVE-2024-11405 · GHSA-74m4-89fm-ff28WP Front-end login and register <= 2.1.0 - Reflected Cross-Site ScriptingPriority LOW 27The WP Front-end login and register plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the email and wpmp_reset_password_token parameters in all versions up to, and including, 2.1.0 due to insuffici…CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00236 · Published 2025-07-02 · No fix listed CWE-79