Featherplugins develops a focused suite of WordPress login-customization and user-management plugins, with a vulnerability footprint centered on its Feather Login Page and related branding and authentication products. The durable signal centers on web-application input and access-control weaknesses, particularly cross-site request forgery and missing authorization checks that recur across the product line.
The number and severity of CVEs published that impact products developed by Featherplugins over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-2549HIGH The Feather Login Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions starting from 1.0.7 up to, and including, 1.1.1. This is due to missing nonce va | May 31, 2023 | 8.8 | 25 | NO | NO |
CVE-2023-46777HIGH Cross-Site Request Forgery (CSRF) vulnerability in Custom Login Page | Temporary Users | Rebrand Login | Login Captcha plugin <= 1.1.3 versions. | Nov 6, 2023 | 8.8 | 24 | NO | NO |
CVE-2023-2545HIGH The Feather Login Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getListOfUsers' function in versions starting fro | May 31, 2023 | 8.8 | 22 | NO | NO |
CVE-2023-2547MEDIUM The Feather Login Page plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'deleteUser' function in versions starting from 1.0. | May 31, 2023 | 5.4 | 20 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Featherplugins.
Media articles that mention a CVE ID that affects a product developed by Featherplugins — matched by CVE ID, not by vendor name.