Skip to content
OpenAdvisories

Vendor

tbenyon

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 4.3

    External Login <= 1.11.2 - Authenticated (Subscriber+) Sensitive Data Exposure via Test Connection

    The External Login plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.11.2 due to the 'exlog_test_connection' AJAX action lacking capability checks or nonce validation. This makes it possible for authe…