CVE-2019-15871

概要

参考情報

• wordpress.org/plugins/loginpress · Release Notes
• webarxsecurity.com/loginpress-plugin · Exploit

loginpress のその他の脆弱性

• CVE-2022-41839中 5.3Broken Access Control vulnerability in WordPress LoginPress plugin <= 1.6.2 on WordPress leading to unauth. changing of Opt-In or Opt-Out tr…
• CVE-2022-0347中 6.1The LoginPress | Custom Login Page Customizer WordPress plugin before 1.5.12 does not escape the redirect-page parameter before outputting i…
• CVE-2019-15872緊急 9.8The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings.