login_register <= 1.2.0 - クロスサイトリクエストフォージェリから格納型クロスサイトスクリプティングへ

The vulnerability lies in the lack of proper nonce validation and insufficient input sanitization/output escaping on the 'loginregisterlogin_post' parameter within the plugin's settings page. An attacker can leverage this to craft a Cross-Site Request Forgery (CSRF) attack, tricking an administrator into unknowingly executing malicious JavaScript. Successful exploitation could lead to session hijacking, defacement of the website, or redirection to phishing sites. The impact is particularly severe as it targets administrator accounts, granting attackers significant control over the WordPress site.

WordPress websites utilizing the Login Register plugin, particularly those with administrator accounts that frequently interact with the plugin's settings. Shared hosting environments where multiple WordPress installations share the same server resources are also at increased risk, as a compromised plugin instance could potentially affect other sites on the same server.

• wordpress / composer / npm:

grep -r "login_register_login_post" /var/www/html/wp-content/plugins/login-register/

• generic web:

curl -I https://your-wordpress-site.com/wp-admin/admin-post.php?action=login_register_settings_update | grep -i "login_register_login_post"

1. 2026-03-21Disclosure

   disclosure

1. 予約済み2026-01-27
2. 公開日2026-03-21
3. 更新日2026-04-08
4. EPSS 更新日2026-03-28

The primary mitigation is to upgrade the WordPress Login Register plugin to a version with the vulnerability patched. Until a patch is available, administrators should exercise extreme caution when clicking links or performing actions within the plugin's settings page. Consider implementing a Web Application Firewall (WAF) with CSRF protection rules to block suspicious requests. Regularly review WordPress user accounts and permissions to identify any unauthorized access.

アクティブインストール数

30

プラグイン評価

0.0

WordPressが必要

3.0+

動作確認済みバージョン

3.3.2