Loginpress

loginpress

Vendor: Wpbrigade • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-41839 1Wpbrigade 1Loginpress Jun 17, 2026 Nov 18, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Broken Access Control vulnerability in WordPress LoginPress plugin <= 1.6.2 on WordPress leading to unauth. changing of Opt-In or Opt-Out tracking settings.
CVE-2022-0347 1Wpbrigade 1Loginpress Jun 17, 2026 Mar 7, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The LoginPress \| Custom Login Page Customizer WordPress plugin before 1.5.12 does not escape the redirect-page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting
CVE-2019-15872 1Wpbrigade 1Loginpress Jun 17, 2026 Sep 3, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings.
CVE-2019-15871 1Wpbrigade 1Loginpress Jun 17, 2026 Sep 3, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 The LoginPress plugin before 1.1.4 for WordPress has no capability check for updates to settings.