Codection Clean Login
4 CVEs affecting Codection Clean Login. Latest disclosed: 2024-08-30. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-8252 | High | 8.8 | 2024-08-30 | The Clean Login plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.14.5 via the 'template' attribute of the cle… |
CVE-2017-8875 | Medium | 6.5 | 2017-05-10 | CSRF in the Clean Login plugin before 1.8 for WordPress allows remote attackers to change the login redirect URL or logout redirect URL. |
CVE-2015-9336 | Medium | 6.1 | 2019-08-22 | The clean-login plugin before 1.5.1 for WordPress has reflected XSS. |
CVE-2022-4838 | Medium | 5.4 | 2023-02-06 | The Clean Login WordPress plugin before 1.13.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which cou… |