Skip to content
OpenAdvisories

Vendor

Carlo La Pera

2 known vulnerabilities.

Products

WP Customize Login Page 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-46485

    WordPress WP Customize Login Page plugin <= 1.6.5 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Carlo La Pera WP Customize Login Page wp-customize-login-page allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Customize Login Page: from n/a through <= 1.6.5.

    Carlo La Pera WP Customize Login Page
  • Medium 5.9
    CVE-2025-46477

    WordPress WP Customize Login Page plugin <= 1.6.5 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Carlo La Pera WP Customize Login Page wp-customize-login-page allows Stored XSS.This issue affects WP Customize Login Page: from n/a through <= 1.6.5.

    Carlo La Pera WP Customize Login Page