A security issue has been found in the Passwordless Login plugin for WordPress. This means that versions up to 1.1.2 are at risk. The problem is caused by not properly cleaning up input and output, which allows hackers with at least subscriber-level access to add harmful code to pages. This code will run whenever a user visits the affected page.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
