Lucene search
Ryoma NishiokaPATCHSTACK:C8FA700DFFACEC687299E1E1A68B007DHistoryJul 26, 2021 - 12:00 a.m.
WordPress Admin Custom Login plugin <= 3.2.7 – Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)
2021-07-2600:00:00
Ryoma Nishioka
patchstack.com
5
0.001 Low
EPSS
Percentile
47.3%
Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) discovered by Ryoma Nishioka (Cryptography Laboratory - Tokyo Denki University) in WordPress Admin Custom Login plugin (versions <= 3.2.7).
Solution
Update the WordPress Admin Custom Login plugin to the latest available version (at least 3.2.8).
| CPE | Name | Operator | Version |
|---|---|---|---|
| admin custom login | le | 3.2.7 |
Related
nvd
nvd
CVE-2021-34628
2021-08-02 21:15:08
prion
prion
Cross site request forgery (csrf)
2021-08-02 21:15:00
wpvulndb
wpvulndb
Admin Custom Login < 3.2.8 - CSRF to Stored XSS
2021-07-28 00:00:00
cvelist
cvelist
cve
cve
CVE-2021-34628
2021-08-02 21:15:08
wpexploit
wpexploit
Admin Custom Login < 3.2.8 - CSRF to Stored XSS
2021-07-28 00:00:00