LoginPress

Products

ProductCVEsExploitedLatest
LoginPress Pro7–Jul 9, 2026

Exploited and recent CVEs

  • CVE-2026-12598 High 8.1 LoginPress Pro <= 6.2.3 - Unauthenticated Authentication Bypass via Unverified OAuth Email in Spotify OAuth Callback 0.6%
  • CVE-2026-12595 High 8.1 LoginPress Pro <= 6.2.3 - Unauthenticated Authentication Bypass via Unverified OAuth Email via Discord OAuth Callback 0.6%
  • CVE-2026-12597 High 8.1 LoginPress Pro <= 6.2.3 - Unauthenticated Authentication Bypass via Unverified OAuth Email via GitHub OAuth Callback 0.6%
  • CVE-2026-49058 Critical 9.8 WordPress LoginPress Pro plugin <= 6.2.2 - Privilege Escalation vulnerability 0.3%
  • CVE-2025-7444 Critical 9.8 LoginPress Pro <= 5.0.1 - Authentication Bypass via WordPress.com OAuth provider 0.6%
  • CVE-2024-32676 Medium 5.3 WordPress LoginPress Pro plugin < 3.0.0 - Captcha Bypass vulnerability 0.4%
  • CVE-2024-32677 Medium 6.5 WordPress LoginPress Pro plugin < 3.0.0 - Unauth. License Activation/Deactivation vulnerability 0.5%