Wpbrigade
Wpbrigade Loginpress: vulnerabilidades y CVE
Wpbrigade Loginpress tiene 6 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-1764 | Alta (7.5) | 0.22% | — | 14 mar 2025 | The LoginPress | wp-login Custom Login Page Customizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.1. This is due to missing or incorrect nonce validation… |
| CVE-2024-12594 | Alta (8.8) | 0.71% | — | 24 dic 2024 | The Custom Login Page Styler – Login Protected Private Site , Change wp-admin login url , WordPress login logo , Temporary admin login access , Rename login , Login customizer, Hide wp-login – Limit Login Attempts –… |
| CVE-2022-41839 | Media (5.3) | 0.51% | — | 18 nov 2022 | Broken Access Control vulnerability in WordPress LoginPress plugin <= 1.6.2 on WordPress leading to unauth. changing of Opt-In or Opt-Out tracking settings. |
| CVE-2022-0347 | Media (6.1) | 0.80% | — | 7 mar 2022 | The LoginPress | Custom Login Page Customizer WordPress plugin before 1.5.12 does not escape the redirect-page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting |
| CVE-2019-15872 | Crítica (9.8) | 2.2% | — | 3 sept 2019 | The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings. |
| CVE-2019-15871 | Media (4.3) | 0.89% | — | 3 sept 2019 | The LoginPress plugin before 1.1.4 for WordPress has no capability check for updates to settings. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.