Vulnerabilities

TI-2013-02368 CVE-2013-2707 · GHSA-xcxp-xxx6-5fxh

Cross-site request forgery (CSRF) vulnerability in the Login With Ajax plugin before 3.1…

LOW 32

Cross-site request forgery (CSRF) vulnerability in the Login With Ajax plugin before 3.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settin…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0097 Published 2013-05-10 No fix listed CWE-352

TI-2012-03663 CVE-2012-4283 · GHSA-3cqg-3c94-rm6p

Cross-site scripting (XSS) vulnerability in the Login With Ajax plugin before 3.0.4.1 for…

LOW 24

Cross-site scripting (XSS) vulnerability in the Login With Ajax plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02058 Published 2012-08-13 No fix listed CWE-79

TI-2012-02385 CVE-2012-2759 · GHSA-7gv4-fw33-jqcg

Cross-site scripting (XSS) vulnerability in login-with-ajax.php in the Login With Ajax…

LOW 24

Cross-site scripting (XSS) vulnerability in login-with-ajax.php in the Login With Ajax (aka login-with-ajax) plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the call…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02128 Published 2012-05-22 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in the Login With Ajax plugin before 3.1…

Cross-site scripting (XSS) vulnerability in the Login With Ajax plugin before 3.0.4.1 for…

Cross-site scripting (XSS) vulnerability in login-with-ajax.php in the Login With Ajax…