Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
2 selected

2 records

Vendor: WPBrigade Component: Login Logout Menu Clear all filters
TI-2022-04223 CVE-2022-4622 · GHSA-wh6h-cv93-v7rg

Login Logout Menu <= 1.3.3 - Contributor+ Stored XSS in Shortcode

Priority MEDIUM 58

The Login Logout Menu WordPress plugin through 1.3.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00471 Published 2023-02-21 No fix listed
TI-2022-04226 CVE-2022-4625 · GHSA-q8r9-rm68-q588

Login Logout Menu < 1.4.0 - Contributor+ Stored XSS in Shortcode

Priority MEDIUM 58

The Login Logout Menu WordPress plugin before 1.4.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perf…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2023-01-23 Fixed in 1.4.0