featherplugins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Custom Login Page | Temporary Users | Rebrand Login | Login Captcha | 3 | – | May 31, 2023 |
Exploited and recent CVEs
- CVE-2023-2545 The Feather Login Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getListOfUsers' function in versions starting from 1.0.7 up to, and i 0.7%
- CVE-2023-2547 The Feather Login Page plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'deleteUser' function in versions starting from 1.0.7 up to, and includi 0.4%
- CVE-2023-2549 The Feather Login Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions starting from 1.0.7 up to, and including, 1.1.1. This is due to missing nonce validation in the 'cre 0.3%