Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-94175 2 Saad Iqbal, Wordpress-extensions 2 All In One Login, All In One Login 2026-11-12 7.1 High
Unauthenticated Cross Site Scripting (XSS) in All In One Login <= 2.4.1 versions.
CVE-2025-58595 2 Saad Iqbal, Wordpress 2 All In One Login, Wordpress 2026-04-29 5.3 Medium
Authentication Bypass by Spoofing vulnerability in Saad Iqbal All In One Login change-wp-admin-login allows Identity Spoofing.This issue affects All In One Login: from n/a through <= 2.0.8.