CVE-2020-27615

Description

References

• plugins.trac.wordpress.org/changeset/2401010/loginizer · Patch
• wpdeeply.com/loginizer-before-1-6-4-sqli-injection · Exploit
• wpscan.com/vulnerability/10441 · Third Party Advisory
• zdnet.com/article/wordpress-deploys-forced-security-update-for-dangerous-bug-in-popular-plugin · Third Party Advisory

Altre vulnerabilità di loginizer

• CVE-2024-10097ALTO 8.1The Loginizer Security and Loginizer plugins for WordPress are vulnerable to authentication bypass in all versions up to, and including, 1.9…
• CVE-2023-2296MEDIO 6.1The Loginizer WordPress plugin before 1.7.9 does not escape a parameter before outputting it back in the page, leading to a Reflected Cross-…
• CVE-2022-45079ALTO 8.8Cross-Site Request Forgery (CSRF) vulnerability in Softaculous Loginizer plugin <= 1.7.5 versions.
• CVE-2022-45084MEDIO 6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Softaculous Loginizer plugin <= 1.7.5 versions.
• CVE-2018-11366MEDIO 6.1init.php in the Loginizer plugin 1.3.8 through 1.3.9 for WordPress has Unauthenticated Stored Cross-Site Scripting (XSS) because logging is …