Skip to content
OpenAdvisories

Vendor

frankkoenen

2 known vulnerabilities.

Products

Plugin Name: login_register 1 ldap_login_password_and_role_manager 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-1503

    login_register <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

    The login_register plugin for WordPress is vulnerable to Cross-Site Request Forgery to Stored Cross-Site Scripting in all versions up to, and including, 1.2.0. This is due to missing nonce validation on the settings page and insufficient input sanitization an…

    frankkoenen Plugin Name: login_register Web / CMS