Back to Database
Status published
Medium
CVE-2012-2759
Cross-site scripting (XSS) vulnerability in login-with-ajax.php in the Login With...
Vulnerability Description
Cross-site scripting (XSS) vulnerability in login-with-ajax.php in the Login With Ajax (aka login-with-ajax) plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter in a lostpassword action to wp-login.php.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-2759
Credits & Attribution
No credits recorded in the NVD database.
References
More from netweblogic
View All →CVE-2025-6976
Events Manager <= 7.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes
Medium
6.4
CVE-2025-6975
Event Manager <= 7.0.3 - Reflected Cross-Site Scripting via `calendar_header` Parameter
Medium
6.1
CVE-2025-6970
Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter
High
7.5
CVE-2025-12976
Events Manager <= 7.2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events_list_grouped' Shortcode
Medium
6.4
CVE-2025-12408
Events Manager <= 7.2.2.2 - Unauthenticated Information Exposure
Medium
5.3
Affected Vendor
netweblogic
View all reports →Affected Software
login with ajax
Vulnerable Versions:
0, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.2, 2.21, 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0b
Timeline
Official Publish:
May 22nd, 2012
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.