CVE-2024-54255: Aviplugins.com Login Widget With Shortcode

Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days.

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in aviplugins.com Login Widget With Shortcode login-sidebar-widget allows Phishing.This issue affects Login Widget With Shortcode: from n/a through <= 6.1.2.

Affected products

• Aviplugins.com Login Widget With Shortcode: up to and including 6.1.2

Published 2024-12-09. Last modified 2026-06-17.