WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
login-with-phone-number
Published
2024-09-14
Title
Login with phone number < 1.7.50 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation
Slug
login-with-phone-number
Published
2025-08-14
Title
WooCommerce OTP Login With Phone Number, OTP Verification < 1.8.48 - Authentication Bypass
Slug
login-with-phone-number
Published
2026-05-28
Title
OTP Login With Phone Number, OTP Verification < 1.8.61 - Unauthenticated Authentication Bypass via Firebase OTP Verification
Slug
login-with-salesforce
Published
2026-02-12
Title
Login with Salesforce <= 1.0.2 - Unauthenticated Authentication Bypass
Slug
login-with-vipps
Published
2024-11-27
Title
Login with Vipps and MobilePay < 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
login-with-yourmembership
Published
2023-09-01
Title
YourMembership Single Sign On < 1.1.4 - Admin+ Stored XSS
Slug
login-with-yourmembership
Published
2025-10-14
Title
Login with YourMembership - YM SSO Login < 1.1.8 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'moym_display_test_attributes'
Slug
loginizer
Published
2017-08-08
Title
Loginizer <= 1.3.5 - Blind SQL Injection
Slug
loginizer
Published
2017-08-08
Title
Loginizer <= 1.3.5 - Cross-Site Request Forgery (CSRF)
Slug
loginizer
Published
2018-05-22
Title
Loginizer 1.3.8-1.3.9 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
loginizer
Published
2020-10-21
Title
Loginizer < 1.6.4 - Unauthenticated SQL Injection
Slug
loginizer
Published
2022-12-05
Title
Loginizer < 1.7.6 - Reflected XSS
Slug
loginizer
Published
2023-05-02
Title
Loginizer 1.7.8 - Reflected XSS
Slug
loginizer
Published
2022-12-05
Title
Loginizer <= 1.7.5 - Cross-Site Request Forgery
Slug
loginizer
Published
2024-11-04
Title
Loginizer Security and Loginizer < 1.9.3 - Authentication Bypass
Slug
loginizer-security
Published
2024-11-04
Title
Loginizer Security and Loginizer < 1.9.3 - Authentication Bypass
Slug
loginplus
Published
2024-11-04
Title
Loginplus <= 1.2 - Unauthenticated Stored Cross-Site Scripting
Slug
loginplus
Published
2025-01-16
Title
Loginplus <= 1.2 - Missing Authorization
Slug
loginpress
Published
2018-11-29
Title
LoginPress <= 1.1.13 - Unauthorized Blind SQL Injection
Slug
loginpress
Published
2018-11-29
Title
LoginPress <= 1.1.15 - Authenticated Blind SQL Injection
Slug
loginpress
Published
2022-02-14
Title
LoginPress < 1.5.12 - Reflected Cross-Site Scripting
Slug
loginpress
Published
2022-11-07
Title
LoginPress < 1.6.3 - Unauthenticated Settings Update
Slug
loginpress
Published
2025-03-13
Title
LoginPress < 4.0.0 - Arbitrary Options Update via CSRF
Slug
loginpress-pro
Published
2024-04-17
Title
LoginPress Pro < 3.0.0 - Unauthenticated License Activation/Deactivation
Slug
loginpress-pro
Published
2024-04-17
Title
LoginPress Pro < 3.0.0 - Captcha Bypass