TI-2026-47265 CVE-2026-66594 · GHSA-994g-fvfg-cwf4
WordPress WordPress Persistent Login plugin <= 3.1.0 - SQL Injection vulnerability
Priority LOW 37
Subscriber SQL Injection in WordPress Persistent Login <= 3.1.0 versions.
lukeseager
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
lukeseager records in CISA KEVNo lukeseager vulnerabilities are listed in CISA KEV.
Records
4 records
TI-2026-63301 CVE-2026-94081 · GHSA-x2g2-rx64-q32h
WordPress WordPress Persistent Login plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability
Priority LOW 30
Unauthenticated Cross Site Scripting (XSS) in WordPress Persistent Login <= 3.1.3 versions.
TI-2026-15366 CVE-2026-18752 · GHSA-9vm5-hh7p-3w4x
Persistent Login <= 3.1.0 - Authenticated (Subscriber+) SQL Injection via 'wppl_device_id' Cookie
Priority LOW 29
The Persistent Login plugin for WordPress is vulnerable to generic SQL Injection via 'wppl_device_id' Cookie in all versions up to, and including, 3.1.0 due to insufficient escaping on the user supplied parameter and lac…
TI-2022-04562 CVE-2022-4974 · GHSA-p5fp-r7v7-h5q7
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Priority LOW 28
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_de…