Vulnerabilities

TI-2022-20882 CVE-2022-42884 · GHSA-c7p4-mw6g-7x8p

WordPress WIP Custom Login Plugin <= 1.2.7 is vulnerable to Broken Access Control

LOW 38

Missing Authorization vulnerability in ThemeinProgress WIP Custom Login.This issue affects WIP Custom Login: from n/a through 1.2.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00439 Published 2024-01-17 No fix listed CWE-862

TI-2023-02635 CVE-2023-2813 · GHSA-8mw6-p3x4-67qj

Multiple Themes - Reflected XSS

LOW 29

All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01011 Published 2023-09-04 Fixed in 1.1.13, 1.8.6 +19

TI-2023-16472 CVE-2023-33313 · GHSA-xhmw-wmwj-jvwr

WordPress WIP Custom Login Plugin <= 1.2.9 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in ThemeinProgress WIP Custom Login plugin <= 1.2.9 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-05-28 No fix listed CWE-352

TI-2020-13136 CVE-2020-17362 · GHSA-m998-fmrh-fjw8

search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS.

LOW 33

search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02873 Published 2020-08-12 No fix listed CWE-79

Vulnerabilities

Filters

WordPress WIP Custom Login Plugin <= 1.2.7 is vulnerable to Broken Access Control

Multiple Themes - Reflected XSS

WordPress WIP Custom Login Plugin <= 1.2.9 is vulnerable to Cross Site Request Forgery (CSRF)

search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS.