Vulnerabilities

TI-2026-01197 CVE-2026-1503 · GHSA-p352-rg87-vcp2

login_register <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

LOW 19

The login_register plugin for WordPress is vulnerable to Cross-Site Request Forgery to Stored Cross-Site Scripting in all versions up to, and including, 1.2.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00154 Published 2026-03-21 No fix listed CWE-352

TI-2025-16434 CVE-2025-22548 · GHSA-576p-hp46-4rxc

WordPress ldap_login_password_and_role_manager plugin <= 1.0.12 - CSRF to Stored XSS vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in frankkoenen ldap_login_password_and_role_manager ldap-login-password-and-role-manager allows Stored XSS.This issue aff…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00404 Published 2025-01-07 No fix listed CWE-79

Vulnerabilities

Filters

login_register <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

WordPress ldap_login_password_and_role_manager plugin <= 1.0.12 - CSRF to Stored XSS vulnerability