CVE-2018-11366

MEDIUM · CVSS 6.1 EPSS 2.19%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-05-22 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2018-11366

Severity

MEDIUM

CVSS

6.1

EPSS

2.19%

WordPress

Original Filing — NVD Description

init.php in the Loginizer plugin 1.3.8 through 1.3.9 for WordPress has Unauthenticated Stored Cross-Site Scripting (XSS) because logging is mishandled. This is fixed in 1.4.0.