Vulnerabilities

TI-2021-07218 CVE-2021-24939 · GHSA-8rq5-r7hg-52gr

LoginWP < 3.0.0.5 - Reflected Cross-Site Scripting

LOW 29

The LoginWP (Formerly Peter's Login Redirect) WordPress plugin before 3.0.0.5 does not sanitise and escape the rul_login_url and rul_logout_url parameter before outputting them back in attributes in an admin page, leadin…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00827 Published 2021-12-06 Fixed in 3.0.0.5 CWE-79

TI-2016-08963 CVE-2016-10925 · GHSA-j9fv-2f82-pwcx

The peters-login-redirect plugin before 2.9.1 for WordPress has XSS during the editing of redirect URLs.

LOW 29

The peters-login-redirect plugin before 2.9.1 for WordPress has XSS during the editing of redirect URLs.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00923 Published 2019-08-22 No fix listed CWE-79

TI-2019-11286 CVE-2019-15115 · GHSA-5826-mqx7-cvq3

The peters-login-redirect plugin before 2.9.2 for WordPress has CSRF.

LOW 39

The peters-login-redirect plugin before 2.9.2 for WordPress has CSRF.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00674 Published 2019-08-16 No fix listed CWE-352

Vulnerabilities

Filters

LoginWP < 3.0.0.5 - Reflected Cross-Site Scripting

The peters-login-redirect plugin before 2.9.1 for WordPress has XSS during the editing of redirect URLs.

The peters-login-redirect plugin before 2.9.2 for WordPress has CSRF.