WordPress Custom Login and Signup Widget Code Injection Vulnerability

A code injection vulnerability has been identified in the WordPress Custom Login and Signup Widget plugin, specifically in versions through 1.0. This vulnerability allows arbitrary code execution, where an attacker could potentially execute malicious code on the affected site.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected WordPress site, allowing attackers to execute malicious code remotely.

Remediation

Users are advised to remove and replace the Custom Login and Signup Widget plugin, as it is likely abandoned and will not receive further updates or fixes.