plugin

Custom Login Redirect Vulnerabilities

1 known security issue reported for the Custom Login Redirect WordPress plugin. Most recent disclosed Jul 19, 2021.

1 medium

Running Custom Login Redirect on your site? Check whether your installed version is affected.

Scan your site free

Custom Login Redirect <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

medium

The Custom Login Redirect WordPress plugin through 1.0.0 does not have CSRF check in place when saving its settings, and does not sanitise or escape user input before outputting them back in the page, leading to a Stored Cross-Site Scripting issue

CVSS:
6.1
Affected:
up to 1.0.0
Fix:
No patched version reported
Disclosed:
Jul 19, 2021

CVE-2021-24536 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database