Vulnerabilities

TI-2023-02378 CVE-2023-2545 · GHSA-fqgr-jvch-4pf8

Missing authorization in featherplugins Custom Login Page | Temporary Users | Rebrand…

LOW 39

The Feather Login Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getListOfUsers' function in versions starting from 1.0.7 up to, and including, 1.1.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00714 Published 2023-05-31 No fix listed CWE-862

TI-2023-02380 CVE-2023-2547 · GHSA-97pp-mf36-5jw3

Missing authorization in featherplugins Custom Login Page | Temporary Users | Rebrand…

LOW 25

The Feather Login Page plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'deleteUser' function in versions starting from 1.0.7 up to, and including, 1.1.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00442 Published 2023-05-31 No fix listed CWE-862

TI-2023-02382 CVE-2023-2549 · GHSA-mxpm-pfrp-xvp8

Cross-site request forgery in featherplugins Custom Login Page | Temporary Users |…

MEDIUM 40

The Feather Login Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions starting from 1.0.7 up to, and including, 1.1.1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00331 Published 2023-05-31 No fix listed CWE-352

Vulnerabilities

Filters

Missing authorization in featherplugins Custom Login Page | Temporary Users | Rebrand…

Missing authorization in featherplugins Custom Login Page | Temporary Users | Rebrand…

Cross-site request forgery in featherplugins Custom Login Page | Temporary Users |…