Vulnerabilities

TI-2025-20116 CVE-2025-27269 · GHSA-fjxv-xh69-8464

WordPress .htaccess Login block Plugin <= 0.9a - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anton Aleksandrov .htaccess Login block htaccess-login-block allows Reflected XSS.This issue affects .htaccess Login b…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00318 Published 2025-03-03 No fix listed CWE-79

TI-2024-21025 CVE-2024-31922 · GHSA-8mhr-9h6q-grrp

WordPress Hosting Benchmark tool plugin <= 1.3.6 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Anton Aleksandrov WordPress Hosting Benchmark tool.This issue affects WordPress Hosting Benchmark tool: from n/a through 1.3.6.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.002 Published 2024-04-15 No fix listed CWE-352

Vulnerabilities

Filters

WordPress .htaccess Login block Plugin <= 0.9a - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Hosting Benchmark tool plugin <= 1.3.6 - Cross Site Request Forgery (CSRF) vulnerability