PT-2017-18597 · WordPress · Clean Login Plugin

Published 2017-05-10 · Updated 2017-05-18 · CVE-2017-8875

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Clean Login plugin versions prior to 1.8 for WordPress

Description The issue allows remote attackers to change the login redirect URL or logout redirect URL due to a CSRF flaw.

Recommendations For Clean Login plugin versions prior to 1.8, update to version 1.8 or later to resolve the issue.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2017-8875

Affected Products

Clean Login Plugin

References · 4

• 🔥 http://seclists.org/fulldisclosure/2017/May/23 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-8875 · Security Note
• https://wordpress.org/plugins/clean-login/#developers · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-8875 · Vendor Advisory