Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-28914 EUVD-2025-7868GHSA-3q6w-vp42-26vx

WordPress wordpress login form to anywhere plugin <= 0.2 - Cross Site Scripting (XSS) vulnerability

Published Mar 11, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Sharma wordpress login form to anywhere wp-show-login-form allows Stored XSS.This issue affects wordpress login form to anywhere: from n/a through <= 0.2.

Affected products

VendorProductAffectedFixed
Ajay Sharma wordpress login form to anywhere ≤ 0.2 —

References