Skip to content
OpenAdvisories

Vendor

hiddenpearls

4 known vulnerabilities.

Products

Analytify – Google Analytics Dashboard For WordPress (GA4 analytics tracking) 2 Insert Headers And Footers 1 LoginPress | wp-login Custom Login Page Customizer 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-2111

    WP Headers And Footers <= 3.1.1 - Cross-Site Request Forgery to Arbitrary Options Update

    The Insert Headers And Footers plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.1. This is due to missing or incorrect nonce validation on the 'custom_plugin_set_option' function. This makes it possibl…

    hiddenpearls Insert Headers And Footers Web / CMS
  • High 7.5
    CVE-2025-1764

    LoginPress <= 3.3.1 - Cross-Site Request Forgery to Arbitrary Options Update

    The LoginPress | wp-login Custom Login Page Customizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.1. This is due to missing or incorrect nonce validation on the 'custom_plugin_set_option' functio…

    hiddenpearls LoginPress | wp-login Custom Login Page Customizer Web / CMS