WordPress Plugin Vulnerabilities

User Login History <= 1.5 - Cross-Site Scripting (XSS)

Description

The User Login History WordPress plugin was affected by a Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
user-login-history
Fixed in 1.6

References

CVE
CVE-2017-15867
URL
https://github.com/faiyazalam/WordPress-plugin-user-login-history/commit/519341a7dece59e2c589b908a636e6cf12a61741

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
8252f401-c512-47c3-b0b0-9a58c2e54010

Timeline

Publicly Published
2017-10-26 (about 8 years ago)
Added
2017-10-30 (about 8 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2016-06-27
Title
WP Security Audit Log 1.5-2.4.3 - Authenticated Reflected Cross-Site Scripting (XSS)
Published
2025-01-14
Title
WP Smart TV < 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2016-08-22
Title
Akal Theme - Reflected Cross-Site Scripting (XSS)
Published
2025-09-22
Title
Behance Portfolio Manager < 1.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-01-16
Title
Network-Favorites <= 1.1 - Reflected Cross-Site Scripting