CVE-2024-12594

🗓️ 24 Dec 2024 05:23:44Reported by WordfenceType

Privilege escalation vulnerability in WordPress Login Protected Plugin up to version 7.1.1.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-12594	24 Dec 202405:43	–	circl
CNNVD	WordPress plugin Custom Login Page Styler 安全漏洞	24 Dec 202400:00	–	cnnvd
Cvelist	CVE-2024-12594 ALL In One Custom Login Page <= 7.1.1 - Missing Authorization to Authenticated (Subscriber+)Privilege Escalation	24 Dec 202405:23	–	cvelist
EUVD	EUVD-2024-50984	3 Oct 202520:07	–	euvd
NVD	CVE-2024-12594	24 Dec 202406:15	–	nvd
Patchstack	WordPress ALL In One Custom Login Page plugin <= 7.1.1 - Missing Authorization to Authenticated (Subscriber+)Privilege Escalation vulnerability	23 Dec 202417:38	–	patchstack
Positive Technologies	PT-2024-17669 · WordPress · Custom Login Page Styler – Login Protected Private Site	24 Dec 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-12594	5 Feb 202510:32	–	redhatcve
Vulnrichment	CVE-2024-12594 ALL In One Custom Login Page <= 7.1.1 - Missing Authorization to Authenticated (Subscriber+)Privilege Escalation	24 Dec 202405:23	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 16, 2024 to January 5, 2025)	9 Jan 202514:35	–	wordfence

Vulners

Node

zia-imtiaz login_page_styler_custom_wordpress_login_page_customizer_&_securityRange≤7.1.1wordpress

[
  {
    "vendor": "zia-imtiaz",
    "product": "Login Page Styler – Custom WordPress Login Page Customizer & Security",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "7.1.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/8e50c519-7d79-4270-92e8-75e54bb08cff

15 Apr 2026 00:35Current

8.6High risk

Vulners AI Score8.6

CVSS 3.18.8

EPSS0.04047

SSVC

CWE-862