WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
login-with-ajax
Published
2014-08-01
Title
Login With Ajax - Cross-Site Request Forgery
Slug
login-with-ajax
Published
2017-04-11
Title
Login with AJAX Plugin <= 3.1.6 - Cross-Site Scripting (XSS)
Slug
login-with-ajax
Published
2023-12-07
Title
Login With Ajax < 4.2 - Missing Authorization
Slug
login-with-ajax
Published
2024-04-10
Title
Login With Ajax < 4.2 - Cross-Site Request Forgery to Notice Dismissal
Slug
login-with-azure
Published
2021-08-30
Title
Multiple Plugins from miniorange - Reflected Cross-Site Scripting via appId
Slug
login-with-cognito
Published
2021-08-30
Title
Multiple Plugins from miniorange - Reflected Cross-Site Scripting via appId
Slug
login-with-cognito
Published
2022-12-07
Title
Login with Cognito < 1.4.9 - Admin+ Stored XSS
Slug
login-with-phone-number
Published
2022-02-16
Title
Login with phone number < 1.3.7 - Unauthenticated remote plugin deletion
Slug
login-with-phone-number
Published
2022-07-05
Title
Login with phone number < 1.3.8 - Multiple Admin+ Stored XSS
Slug
login-with-phone-number
Published
2023-01-12
Title
Login with Phone Number < 1.4.2 - Reflected Cross-Site Scripting
Slug
login-with-phone-number
Published
2023-09-12
Title
Login with phone number < 1.5.7 - User Password Change via CSRF
Slug
login-with-phone-number
Published
2024-04-10
Title
Login with phone number < 1.6.94 - Cross-Site Request Forgery
Slug
login-with-phone-number
Published
2024-04-15
Title
Login with phone number < 1.7.17 - Unauthorized Account Password Change to Privilege Escalation
Slug
login-with-phone-number
Published
2024-04-22
Title
Login with phone number < 1.6.94 - Missing Authorization
Slug
login-with-phone-number
Published
2024-05-03
Title
Login with phone number < 1.7.20 - Missing Authorization
Slug
login-with-phone-number
Published
2024-05-28
Title
Login with phone number < 1.7.27 - Authentication Bypass due to Missing Empty Value Check
Slug
login-with-phone-number
Published
2024-06-18
Title
Login with phone number < 1.7.35 - Insecure Password Reset Mechanism
Slug
login-with-phone-number
Published
2024-06-28
Title
Login with phone number < 1.7.36 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
login-with-phone-number
Published
2024-09-14
Title
Login with phone number < 1.7.50 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation
Slug
login-with-phone-number
Published
2025-08-14
Title
WooCommerce OTP Login With Phone Number, OTP Verification < 1.8.48 - Authentication Bypass
Slug
login-with-salesforce
Published
2026-02-12
Title
Login with Salesforce <= 1.0.2 - Unauthenticated Authentication Bypass
Slug
login-with-vipps
Published
2024-11-27
Title
Login with Vipps and MobilePay < 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
login-with-yourmembership
Published
2023-09-01
Title
YourMembership Single Sign On < 1.1.4 - Admin+ Stored XSS
Slug
login-with-yourmembership
Published
2025-10-14
Title
Login with YourMembership - YM SSO Login < 1.1.8 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'moym_display_test_attributes'
Slug
loginizer
Published
2017-08-08
Title
Loginizer <= 1.3.5 - Blind SQL Injection