critical9.8
CVE-2019-15872
The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings.
Impact
The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpbrigade | Loginpress | before 1.1.4 |