Input validation vulnerability in Auto Login New User After Registration 1.9.6

The Auto Login New User After Registration plugin for WordPress is vulnerable to a type of web attack called Stored Cross-Site Scripting. This type of attack could allow someone with administrator-level permissions to inject malicious web scripts into pages on the website, which would be executed whenever a user visits the infected page. This vulnerability affects any WordPress installation that uses the Auto Login New User After Registration plugin, up to version 1.9.6, and is only exploitable if the website has a multi-site installation or has disabled a certain type of web security feature.

Detected in:

Auto Login New User After Registration open vulnerable versions: >= * <= 1.9.6

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.