lukeseager
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WordPress Persistent Login | 2 | – | Sep 30, 2026 |
| Persistent Login | 1 | – | Sep 1, 2026 |
Exploited and recent CVEs
- CVE-2026-94081 WordPress WordPress Persistent Login plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-18752 Persistent Login <= 3.1.0 - Authenticated (Subscriber+) SQL Injection via 'wppl_device_id' Cookie 0.4%
- CVE-2026-66594 WordPress WordPress Persistent Login plugin <= 3.1.0 - SQL Injection vulnerability 0.4%