Approved changes feed: RSS · Atom

cpe:2.3:a:login_widget_with_shortcode_project:login_widget_with_shortcode:2.2.4:*:*:*:*:wordpress:*:*

part: a version: 2.2.4 update: *

VendorLogin Widget With Shortcode Project (993bf1de-c23a-5c11-8217-c8a9b86016dc)
ProductLogin Widget With Shortcode (947f9051-63d4-5cfd-9d8e-12af0b311f35)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/login-sidebar-widget purl2cpe 2026-06-01 10:11:57.133233
pkg:github/wpplugins/login-sidebar-widget purl2cpe 2026-06-01 10:11:57.133235

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-6312 vulnerable 2026-06-08 05:05:57.403227 Details available
Cross-site request forgery (CSRF) vulnerability in the Login Widget With Shortcode (login-sidebar-widget) plugin before 3.2.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the custom_style_afo parameter on the login_widget_afo page to wp-admin/options-general.php.
Published: 2014-10-15T14:00:00.000Z
Updated: 2024-08-06T12:10:13.274Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.