Creative WP Login Page Security & Risk Analysis

wordpress.org/plugins/creative-wp-login-page

Creative WordPress login page plugin makes your login page more beautiful.

400 active installs v10.1 PHP 7.4+ WP 5.5+ Updated Jan 13, 2025
creative-login-pagecustom-loginloginlogin-pagelogin-page-customizer
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Creative WP Login Page Safe to Use in 2026?

Generally Safe

Score 92/100

Creative WP Login Page has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The plugin "creative-wp-login-page" v10.1 exhibits a generally strong security posture based on the provided static analysis. The absence of AJAX handlers, REST API routes, shortcodes, and cron events significantly limits its potential attack surface. Furthermore, the code signals indicate a good adoption of secure coding practices, with all SQL queries using prepared statements and a high percentage of output being properly escaped. The lack of any recorded vulnerabilities or CVEs in its history also points to a well-maintained and secure plugin.

Key Concerns

  • No nonce checks implemented
  • Limited capability checks observed
  • External HTTP requests present
Vulnerabilities
None known

Creative WP Login Page Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Creative WP Login Page Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
8
211 escaped
Nonce Checks
0
Capability Checks
2
File Operations
0
External Requests
3
Bundled Libraries
0

Output Escaping

96% escaped219 total outputs
Attack Surface

Creative WP Login Page Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 54
actionplugins_loadedcwlp.php:40
actionlogin_forminclude\captcha.php:96
actionregister_forminclude\captcha.php:97
filterregistration_errorsinclude\captcha.php:275
filterauthenticateinclude\captcha.php:398
actionsend_headersinclude\captcha.php:409
actionlogin_enqueue_scriptsinclude\effect.php:25
actionlogin_footerinclude\effect.php:39
filterlogin_display_language_dropdowninclude\init.php:92
actionlogin_enqueue_scriptsinclude\init.php:95
actionlogin_enqueue_scriptsinclude\init.php:100
filterlogin_headerurlinclude\init.php:110
actionadmin_enqueue_scriptsinclude\init.php:146
actionplugins_loadedinclude\login-page.php:9
actionwp_loadedinclude\login-page.php:10
actionsetup_themeinclude\login-page.php:11
filtersite_urlinclude\login-page.php:12
filternetwork_site_urlinclude\login-page.php:13
filterwp_redirectinclude\login-page.php:14
filtersite_option_welcome_emailinclude\login-page.php:15
filteradmin_urlinclude\login-page.php:16
filtergettextinclude\login-page.php:294
actionlogin_enqueue_scriptsinclude\login-page.php:309
filteroptionsframework_optionsinclude\settings.php:379
actionadmin_initinclude\settings.php:808
actionadmin_enqueue_scriptsinclude\settings.php:809
actionadmin_menuinclude\settings.php:811
actionlogin_footerinclude\social.php:28
actionlogin_enqueue_scriptsinclude\social.php:129
actionadmin_menuoptions\includes\class-options-framework-admin.php:32
actionadmin_initoptions\includes\class-options-framework-admin.php:35
actionoptionsframework_after_validateoptions\includes\class-options-framework-admin.php:54
actionadmin_headoptions\includes\class-options-framework-admin.php:162
actionadmin_initoptions\includes\class-options-framework.php:28
filterof_sanitize_textoptions\includes\class-options-sanitization.php:15
filterof_sanitize_passwordoptions\includes\class-options-sanitization.php:22
filterof_sanitize_selectoptions\includes\class-options-sanitization.php:29
filterof_sanitize_radiooptions\includes\class-options-sanitization.php:36
filterof_sanitize_imagesoptions\includes\class-options-sanitization.php:43
filterof_sanitize_textareaoptions\includes\class-options-sanitization.php:56
filterof_sanitize_checkboxoptions\includes\class-options-sanitization.php:70
filterof_sanitize_multicheckoptions\includes\class-options-sanitization.php:92
filterof_sanitize_uploadoptions\includes\class-options-sanitization.php:110
filterof_sanitize_editoroptions\includes\class-options-sanitization.php:129
filterof_sanitize_backgroundoptions\includes\class-options-sanitization.php:200
filterof_background_repeatoptions\includes\class-options-sanitization.php:214
filterof_background_positionoptions\includes\class-options-sanitization.php:228
filterof_background_attachmentoptions\includes\class-options-sanitization.php:242
filterof_sanitize_typographyoptions\includes\class-options-sanitization.php:272
filterof_font_sizeoptions\includes\class-options-sanitization.php:285
filterof_font_styleoptions\includes\class-options-sanitization.php:297
filterof_font_faceoptions\includes\class-options-sanitization.php:309
filterof_sanitize_coloroptions\includes\class-options-sanitization.php:372
actioninitoptions\options-framework.php:54
Maintenance & Trust

Creative WP Login Page Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedJan 13, 2025
PHP min version7.4
Downloads16K

Community Trust

Rating100/100
Number of ratings7
Active installs400
Developer Profile

Creative WP Login Page Developer Profile

وردپرس ایرانی

2 plugins · 410 total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Creative WP Login Page

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/creative-wp-login-page/assets/css/cwlp-admin.css/wp-content/plugins/creative-wp-login-page/assets/css/cwlp-login-page.css/wp-content/plugins/creative-wp-login-page/assets/css/cwlp-responsive.css/wp-content/plugins/creative-wp-login-page/assets/js/cwlp-admin.js/wp-content/plugins/creative-wp-login-page/assets/js/cwlp-login-page.js/wp-content/plugins/creative-wp-login-page/assets/js/cwlp-validation.js
Script Paths
https://www.google.com/recaptcha/api.jshttps://www.google.com/recaptcha/api.js?render=explicithttps://www.google.com/recaptcha/api.js?onload=onloadCallback&render=6Ldkj-UfAAAAABh2o0F-bH-U0wY8e0V8VnF2dM0n
Version Parameters
creative-wp-login-page/assets/css/cwlp-admin.css?ver=creative-wp-login-page/assets/css/cwlp-login-page.css?ver=creative-wp-login-page/assets/css/cwlp-responsive.css?ver=creative-wp-login-page/assets/js/cwlp-admin.js?ver=creative-wp-login-page/assets/js/cwlp-login-page.js?ver=creative-wp-login-page/assets/js/cwlp-validation.js?ver=

HTML / DOM Fingerprints

CSS Classes
cwlp-numoperaothersolve_thissolvo-capmnkh_captcha_nonce_field
HTML Comments
<!-- Google reCAPTCHA v2 Checkbox --><!-- Invisible Google reCAPTCHA v2 --><!-- Display reCAPTCHA v3 (handled in JS) --><!-- Simple CAPTCHA -->+2 more
Data Attributes
data-sitekeydata-callbackdata-sizemnkh_captcha_answermnkh_captcha_nonce_fieldonloadCallback
JS Globals
onloadCallbackonSubmit
FAQ

Frequently Asked Questions about Creative WP Login Page