Cross-Site Scripting Vulnerability in zM Ajax Login & Register Plugin for WordPress
CVE-2015-4465

Currently unrated

Key Information:

Vendor

Wordpress
Status
Zm Ajax Login \& Register
Vendor
CVE Published:
10 June 2015

What is CVE-2015-4465?

A Cross-Site Scripting (XSS) vulnerability exists in the zM Ajax Login & Register plugin for WordPress prior to version 1.1.0. This flaw allows attackers to inject arbitrary web scripts or HTML into pages viewed by users, potentially leading to session hijacking, data theft, or other malicious activities. Attackers can exploit this vulnerability through various unnamed vectors, emphasizing the need for site administrators to promptly update the plugin to mitigate risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://wordpress.org/plugins/zm-ajax-login-register/chan...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.