Skip to content
OpenAdvisories

Vendor

AccessAlly

4 known vulnerabilities.

Products

PopupAlly 3 AccessAlly 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2020-36875

    AccessAlly < 3.3.2 Unauthenticated Arbitrary PHP Code Execution

    AccessAlly WordPress plugin versions prior to 3.3.2 contain an unauthenticated arbitrary PHP code execution vulnerability in the Login Widget. The plugin processes the login_error parameter as PHP code, allowing an attacker to supply and execute arbitrary PHP…

    AccessAlly AccessAlly Web / CMS