Skip to content
OpenAdvisories

Vendor

travispluse

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    Rename wp-login.php to anything you want <= 2.0.1 - Unauthenticated SQL Injection via 'log' (Username) Parameter

    The Rename wp-login.php to anything you want plugin for WordPress is vulnerable to time-based SQL Injection via 'log' (Username) Parameter in all versions up to, and including, 2.0.1 due to insufficient escaping on the user supplied parameter and lack of suff…