Plugin icon

LoginPress | wp-login Custom Login Page Customizer

loginpress

Vulnerabilities:

5

Last Updated:

December 10, 2025

Active Installs:

200000

Published
Title
Fixed in
CVSS
Published
2025-03-13
Title
LoginPress < 4.0.0 - Arbitrary Options Update via CSRF
Fixed in
Fixed in 4.0.0
CVSS
7.5 (high)
Published
2022-11-07
Title
LoginPress < 1.6.3 - Unauthenticated Settings Update
Fixed in
Fixed in 1.6.3
CVSS
5.3 (medium)
Published
2022-02-14
Title
LoginPress < 1.5.12 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.5.12
CVSS
6.1 (medium)
Published
2018-11-29
Title
LoginPress <= 1.1.13 - Unauthorized Blind SQL Injection
Fixed in
Fixed in 1.1.14
CVSS
9.8 (critical)
Published
2018-11-29
Title
LoginPress <= 1.1.15 - Authenticated Blind SQL Injection
Fixed in
Fixed in 1.1.16
CVSS
n/a