Skip to content
OpenAdvisories

Vendor

hornero

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-8252 Scanner template

    Clean Login <= 1.14.5 - Authenticated (Contributor+) Local File Inclusion

    The Clean Login plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.14.5 via the 'template' attribute of the clean-login-register shortcode. This makes it possible for authenticated attackers, with Contributor-le…