Skip to content
OpenAdvisories

Vendor

joelcj91

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.1

    Loggedin – Limit Active Logins <= 1.3.1 - Reflected Cross-Site Scripting

    The Loggedin – Limit Active Logins plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.3.1. This makes it possible for unauthentic…

  • Medium 6.4

    404 to 301 <= 3.0.7 - Missing Authorization to Redirect Creation

    The 404 to 301 plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the open_redirect & save_redirect functions in versions up to, and including, 3.0.7. This makes it possible for authenticated attackers to view, crea…