CVE-2018-11366

Mô tả

Tham khảo

• blog.dewhurstsecurity.com/2018/05/22/loginizer-wordpress-plugin-xss-vulnerability.html · Exploit
• plugins.trac.wordpress.org/changeset/1878502/loginizer · Patch
• wordpress.org/plugins/loginizer · Release Notes
• wpvulndb.com/vulnerabilities/9088 · Exploit

Lỗ hổng khác của loginizer

• CVE-2024-10097CAO 8.1The Loginizer Security and Loginizer plugins for WordPress are vulnerable to authentication bypass in all versions up to, and including, 1.9…
• CVE-2023-2296TRUNG BÌNH 6.1The Loginizer WordPress plugin before 1.7.9 does not escape a parameter before outputting it back in the page, leading to a Reflected Cross-…
• CVE-2022-45079CAO 8.8Cross-Site Request Forgery (CSRF) vulnerability in Softaculous Loginizer plugin <= 1.7.5 versions.
• CVE-2022-45084TRUNG BÌNH 6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Softaculous Loginizer plugin <= 1.7.5 versions.
• CVE-2020-27615NGHIÊM TRỌNG 9.8The Loginizer plugin before 1.6.4 for WordPress allows SQL injection (with resultant XSS), related to loginizer_login_failed and lz_valid_ip…