Loginpress Security Vulnerabilities and Issues — Loginpress CVE List

Lucene search

WpbrigadeLoginpress

4 matches found

CVE•added 2022/03/07 9:15 a.m.•85 views

CVE-2022-0347

The LoginPress | Custom Login Page Customizer WordPress plugin before 1.5.12 does not escape the redirect-page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting

6.1CVSS6AI score0.00199EPSS

CVE•added 2019/09/03 1:15 p.m.•70 views

CVE-2019-15872

The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings.

9.8CVSS9.9AI score0.00546EPSS

CVE•added 2019/09/03 1:15 p.m.•68 views

CVE-2019-15871

The LoginPress plugin before 1.1.4 for WordPress has no capability check for updates to settings.

4.3CVSS5.6AI score0.00121EPSS

CVE•added 2022/11/18 11:15 p.m.•51 views

CVE-2022-41839

Broken Access Control vulnerability in WordPress LoginPress plugin

5.3CVSS5.2AI score0.00086EPSS