Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Duckdev Clear all filters
TI-2024-08564 CVE-2024-9228 · GHSA-w4g5-wwhq-79mp

Loggedin – Limit Active Logins <= 1.3.1 - Reflected Cross-Site Scripting

Priority LOW 27

The Loggedin – Limit Active Logins plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.3.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00392 Published 2024-10-01 No fix listed CWE-79
TI-2021-03196 CVE-2021-4338 · GHSA-ph5r-wpp4-cgh6

404 to 301 <= 3.0.7 - Missing Authorization to Redirect Creation

Priority LOW 29

The 404 to 301 plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the open_redirect & save_redirect functions in versions up to, and including, 3.0.7.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00617 Published 2023-06-07 No fix listed CWE-284