Vendors / LoginPress Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 3
Exploited now LoginPress records in CISA KEV No LoginPress vulnerabilities are listed in CISA KEV.
Priority MEDIUM 50
The LoginPress Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.0.1.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00605 · Published 2025-07-18 · No fix listed CWE-288
Priority MEDIUM 49
Unauthenticated Privilege Escalation in LoginPress Pro <= 6.2.2 versions.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00321 · Published 2026-06-17 · No fix listed CWE-266
Priority LOW 38
The LoginPress Pro plugin for WordPress is vulnerable to authentication bypass in versions up to and including 6.2.3 via the Spotify Social Login addon.
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.00558 · Published 2026-07-09 · No fix listed CWE-287
Priority LOW 38
The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via the GitHub OAuth callback in versions up to, and including, 6.2.3.
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.00568 · Published 2026-07-09 · No fix listed CWE-287
Priority LOW 38
The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via Unverified OAuth Email in all versions up to and including 6.2.3.
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.00558 · Published 2026-07-09 · No fix listed CWE-287
Priority LOW 29
Missing Authorization vulnerability in LoginPress LoginPress Pro.This issue affects LoginPress Pro: from n/a before 3.0.0.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00531 · Published 2024-04-24 · Fixed in 3.0.0 CWE-862
Priority LOW 24
Improper Restriction of Excessive Authentication Attempts vulnerability in LoginPress LoginPress Pro allows Removing Important Client Functionality.This issue affects LoginPress Pro: from n/a before 3.0.0.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0043 · Published 2024-04-25 · Fixed in 3.0.0 CWE-307
Open these records in search → All records by CVSS severity
2 3 2 0 0
THREATIST.IORead the docs