Description

WordPress Plugin Custom Dashboard & Login Page-AGCA is prone to multiple unspecified vulnerabilities. No available information exists regarding these issues and their impact on a vulnerable website. WordPress Plugin Custom Dashboard & Login Page-AGCA version 1.5.4.2 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 1.5.4.3 or latest

References

https://wordpress.org/plugins/ag-custom-admin/changelog/

Related Vulnerabilities

Squid Improper Input Validation Vulnerability (CVE-2015-3455)

Artifactory Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-45721)

ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5832)

PHP Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Vulnerability (CVE-2018-19518)

WordPress Plugin Site Import Remote File Inclusion (1.0.1)

Severity

High

Tags

Missing Update