Approved changes feed: RSS · Atom

cpe:2.3:a:yithemes:yith_custom_login:*:*:*:*:wordpress:*:*:*

part: a version: * update: *

VendorYithemes (3d8b3521-99a5-5f4f-9825-4a1663e47e91)
ProductYith Custom Login (bdbdca18-092f-51b4-bb72-553ff2c1489b)
Edition*
Language*
Software editionwordpress
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/yith-custom-login purl2cpe 2026-06-01 10:12:08.974050

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-35732 vulnerable 2026-06-03 14:56:02.902475 WordPress YITH Custom Login plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH Custom Login yith-custom-login.This issue affects YITH Custom Login: from n/a through <= 1.7.0.
Published: 2024-06-08T12:52:23.361Z
Updated: 2026-04-28T16:09:54.078Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.