← Back

Hellomohsinkhan

hellomohsinkhan

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Wp Front End Login And Register
wp_front-end_login_and_register
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-11405
1Hellomohsinkhan
1Wp Front End Login And Register
Jun 17, 2026
Jul 2, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The WP Front-end login and register plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the email and wpmp_reset_password_token parameters in all versions up to, and including, 2.1.0 due to insuffici...Show more
The WP Front-end login and register plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the email and wpmp_reset_password_token parameters in all versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.Show less