Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:wp_login_security_and_history:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductWp Login Security And History (991a2c11-a662-54d5-af49-fa9ee1969ee3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24328 vulnerable 2026-06-08 05:30:04.193753 WP Login Security and History <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)
The WP Login Security and History WordPress plugin through 1.0 did not have CSRF check when saving its settings, not any sanitisation or validation on them. This could allow attackers to make logged in administrators change the plugin's settings to arbitrary values, and set XSS payloads on them as well
Published: 2021-06-01T11:33:31.000Z
Updated: 2024-08-03T19:28:23.829Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.