Skip to content
OpenAdvisories

Vendor

Arefly

3 known vulnerabilities.

Products

Delete Post Revision 1 WP Header Notification 1 Login Redirect 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2025-30575

    WordPress Login Redirect plugin <= - 1.0.5 Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arefly Login Redirect login-redirect allows Stored XSS.This issue affects Login Redirect: from n/a through <= 1.0.5.

    Arefly Login Redirect
  • Medium 5.9
    CVE-2025-22579

    WordPress WP Header Notification plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arefly WP Header Notification wp-header-notification allows Stored XSS.This issue affects WP Header Notification: from n/a through <= 1.2.7.

    Arefly WP Header Notification