Skip to content
OpenAdvisories

Vendor

LoginPress

7 known vulnerabilities.

Products

LoginPress Pro 7
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-49058

    WordPress LoginPress Pro plugin <= 6.2.2 - Privilege Escalation vulnerability

    Unauthenticated Privilege Escalation in LoginPress Pro <= 6.2.2 versions.

    LoginPress LoginPress Pro
  • Critical 9.8
    CVE-2025-7444

    LoginPress Pro <= 5.0.1 - Authentication Bypass via WordPress.com OAuth provider

    The LoginPress Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.0.1. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for unauthenticat…

    LoginPress LoginPress Pro Web / CMS