featherplugins

Products

Exploited and recent CVEs

  • CVE-2023-2545 High 8.1 The Feather Login Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getListOfUsers' function in versions starting from 1.0.7 up to, and i 0.7%
  • CVE-2023-2547 Medium 5.4 The Feather Login Page plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'deleteUser' function in versions starting from 1.0.7 up to, and includi 0.4%
  • CVE-2023-2549 High 8.8 The Feather Login Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions starting from 1.0.7 up to, and including, 1.1.1. This is due to missing nonce validation in the 'cre 0.3%