[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWn6tYGjXkS4WTYPyqkxIckP1jbaCEm-42QtfW6OE-fg":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":13,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":47,"crawl_stats":36,"alternatives":55,"analysis":155,"fingerprints":272},"ideal-wp-login-logo-changer","Custom Login Logo","1.1.10","Hakik Zaman","https:\u002F\u002Fprofiles.wordpress.org\u002Fhakik\u002F","\u003Cp>\u003Cstrong>Custom Login Logo For WordPress\u003C\u002Fstrong> allows you to replace the default WordPress logo and display your own site logo.\u003C\u002Fp>\n\u003Cp>Do you want to show your site logo instead WordPress logo? \u003Cstrong>Custom Login Logo For WordPress\u003C\u002Fstrong> plugin will help you to do that. Sometimes you want to show your identity or you are fed up to see the default WordPress logo. That’s why we are introducing \u003Cstrong>Custom Login Logo For WordPress\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>Feature Highlights Of Custom Login Logo For WordPress\u003C\u002Fh3>\n\u003Cp>👉 Set your website logo for the login page using \u003Cstrong>Custom Login Logo For WordPress\u003C\u002Fstrong>\u003Cbr \u002F>\n👉 Change the background. You can add a color or image for your login page background.\u003Cbr \u002F>\n👉 You can set the width and height of the logo from settings panel\u003Cbr \u002F>\n👉 By default, the login logo will not redirect to wordpress.org rather than redirect to your site.\u003Cbr \u002F>\n👉 You can redirect anywhere after clicking on your site logo (if you set a link).\u003Cbr \u002F>\n👉 You can check current logo right after saving your settings on plugin setting page.\u003Cbr \u002F>\n👉 Change the link color under the login button.\u003Cbr \u002F>\n👉 Link hover color can also be changed from the settings page.\u003C\u002Fp>\n\u003Ch3>How does the Custom Login Logo For WordPress work:\u003C\u002Fh3>\n\u003Cp>After installing the \u003Cstrong>Custom Login Logo For WordPress\u003C\u002Fstrong> you will get an option under Settings called \u003Cstrong>Custom Login Logo\u003C\u002Fstrong> just click on that. You can either hover the \u003Cstrong>Settings\u003C\u002Fstrong> menu or can click on Settings to see the submenu \u003Cstrong>Custom Login Logo\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>By clicking on \u003Cstrong>Upload Logo\u003C\u002Fstrong> button media upload screen will appear. Please choose your site logo and from bottom right corner you will get a button \u003Cstrong>Select\u003C\u002Fstrong>. After choosing your site logo just pressed that \u003Cstrong>Select\u003C\u002Fstrong> button.\u003C\u002Fp>\n\u003Cp>Now you can choose site URL for your logo. By default, it will redirect to your site address (if you keep that field empty).\u003C\u002Fp>\n\u003Cp>Set your logo width in pixel(px). If you keep this field empty \u003Cstrong>Custom Login Logo For WordPress\u003C\u002Fstrong> will make it 100%.\u003C\u002Fp>\n\u003Cp>Last but not least, you can also input your desirable height in pixel(px). By default, the value of this field is 100px.\u003C\u002Fp>\n\u003Cp>Kindly let us know your feedback or comments to add more features in this plugin.\u003C\u002Fp>\n","Change the default WordPress logo by uploading your site logo for the login page.",700,8340,0,"2025-08-23T15:09:00.000Z","6.8.5","5.8","5.2.4",[19,20,21,22,23],"change-wp-default-logo","custom-logo","login-logo","wordpress-logo-change","wp-admin-logo","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fideal-wp-login-logo-changer.1.1.10.zip",99,1,"2025-03-27 00:00:00","2026-03-15T15:16:48.613Z",[31],{"id":32,"url_slug":33,"title":34,"description":35,"plugin_slug":4,"theme_slug":36,"affected_versions":37,"patched_in_version":38,"severity":39,"cvss_score":40,"cvss_vector":41,"vuln_type":42,"published_date":28,"updated_date":43,"references":44,"days_to_patch":46},"CVE-2025-30822","custom-login-logo-cross-site-request-forgery","Custom Login Logo \u003C= 1.1.7 - Cross-Site Request Forgery","The Custom Login Logo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.7. This is due to missing or incorrect nonce validation on the iwllc_reset_settings() function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site administrator into performing an action such as clicking on a link.",null,"\u003C=1.1.7","1.1.8","medium",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2025-04-02 15:03:06",[45],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fcce48da9-9c9b-49ef-bc03-371cb0e99242?source=api-prod",7,{"slug":48,"display_name":7,"profile_url":8,"plugin_count":49,"total_installs":50,"avg_security_score":51,"avg_patch_time_days":52,"trust_score":53,"computed_at":54},"hakik",4,760,95,5,97,"2026-04-04T18:32:34.459Z",[56,76,94,114,135],{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":64,"downloaded":65,"rating":66,"num_ratings":67,"last_updated":68,"tested_up_to":69,"requires_at_least":70,"requires_php":17,"tags":71,"homepage":24,"download_link":73,"security_score":74,"vuln_count":27,"unpatched_count":13,"last_vuln_date":75,"fetched_at":29},"change-login-logo","Change WordPress Login Logo","1.3","Boopathi Rajan","https:\u002F\u002Fprofiles.wordpress.org\u002Fboopathi0001\u002F","\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FIu-XlWjyR9o?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>The Change WordPress Login Logo Plugin is a must-have for anyone looking to add a touch of personalization to their WordPress site. With this plugin, you can easily update your WordPress login page logo with your own customized logo in just a few clicks, without any coding knowledge required. Make your login page truly unique to your brand.\u003C\u002Fp>\n\u003Cp>The plugin is incredibly user-friendly, allowing you to upload your logo quickly and easily via the WordPress customizer. It is also fully customizable, allowing you to adjust the logo’s size, positioning, and other settings to perfectly match your site’s design.\u003C\u002Fp>\n\u003Cp>In addition to its ease of use, the Change WordPress Login Logo Plugin is also lightweight and fast-loading, ensuring that it won’t slow down your site’s performance. Plus, it’s compatible with all the latest versions of WordPress, ensuring that you always have access to the latest features and security updates.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.boopathirajan.com\u002Fproduct\u002Fchange-wordpress-login-logo-pro\u002F\" rel=\"nofollow ugc\">Purchase Premium Plugin\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Premium Features:\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>1. Login Background Color Change\n2. Logn Form Background Color\n3. Form Label Text Color\n4. Login Page Link Color\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Upload your logo for WordPress login page instead of the usual WordPress logo with simple settings.",20000,185489,92,17,"2024-07-31T06:16:00.000Z","6.6.5","4.3",[72,20,21,22,23],"change-default-logo","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fchange-login-logo.1.3.zip",91,"2020-08-15 00:00:00",{"slug":77,"name":78,"version":79,"author":80,"author_profile":81,"description":82,"short_description":83,"active_installs":84,"downloaded":85,"rating":86,"num_ratings":27,"last_updated":87,"tested_up_to":88,"requires_at_least":89,"requires_php":17,"tags":90,"homepage":92,"download_link":93,"security_score":66,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":29},"change-login-page-logo","Change Login Page Logo","1.0.3","Subodh Ghulaxe","https:\u002F\u002Fprofiles.wordpress.org\u002Fsubodhghulaxe\u002F","\u003Cp>\u003Cstrong>Change Login Page Logo\u003C\u002Fstrong> lets you change the default WordPress login page logo image. It also allows you to change logo width, logo height, bottom margin of logo and logo URL.\u003C\u002Fp>\n\u003Cp>By default WordPress add its own logo to the login page. If you are sharing the login URL with users, subscribers or even your own team members, it makes sense to have your own branding and change default login logo.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features include:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Change Login Logo Image.\u003C\u002Fstrong> Select image from WordPress media or use external image\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customize Logo Image Width.\u003C\u002Fstrong> Logo width in pixel\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customize Logo Image Height.\u003C\u002Fstrong> Logo height in pixel\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customize Logo Bottom Margin.\u003C\u002Fstrong> Adjust the spacing between logo and login form\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Change Logo Link.\u003C\u002Fstrong> This link will open on the click of logo\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Translations\u002FLanguages:\u003C\u002Fstrong>\u003Cbr \u002F>\nThis plugin is translation ready and is available in the following languages:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>English\u003C\u002Fli>\n\u003C\u002Ful>\n","A simple and easy way to change WordPress login logo, using Change Login Page Logo plugin you can change logo image, logo width, height and logo URL.",1000,6109,100,"2024-06-23T12:26:00.000Z","6.5.8","2.7",[77,20,21,91,23],"wordpress-login-logo","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fchange-login-page-logo\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fchange-login-page-logo.1.0.3.zip",{"slug":95,"name":96,"version":97,"author":98,"author_profile":99,"description":100,"short_description":101,"active_installs":102,"downloaded":103,"rating":104,"num_ratings":105,"last_updated":106,"tested_up_to":107,"requires_at_least":108,"requires_php":24,"tags":109,"homepage":112,"download_link":113,"security_score":86,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":29},"my-wp-login-logo","My WordPress Login Logo","2.5.2","afsalrahim","https:\u002F\u002Fprofiles.wordpress.org\u002Fafsalrahim\u002F","\u003Cp>\u003Cstrong>My WordPress Login Logo\u003C\u002Fstrong> lets you to add a custom logo in your wordpress login page instead of the usual wordpress logo and customize your login page.\u003C\u002Fp>\n\u003Cp>It also allows you to specify the height and width of the logo. Apart from that you can also customize the login form by adding a custom message below login form and also provide some cool fade in effects for the login form. By adding your custom logo in your login page, you can make your website more professional and also impress the guest bloggers and other users who view these pages.\u003C\u002Fp>\n","My WordPress Login Logo lets you to add a custom logo in your wordpress login page instead of the usual wordpress logo and customize your login page.",10000,182940,98,12,"2026-02-17T12:28:00.000Z","6.9.4","3.0.1",[77,20,110,111,91],"login-page-logo","logo-changer","https:\u002F\u002Fafsal.me","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmy-wp-login-logo.2.5.2.zip",{"slug":115,"name":116,"version":117,"author":118,"author_profile":119,"description":120,"short_description":121,"active_installs":122,"downloaded":123,"rating":124,"num_ratings":125,"last_updated":126,"tested_up_to":15,"requires_at_least":127,"requires_php":128,"tags":129,"homepage":133,"download_link":134,"security_score":86,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":29},"custom-login-logo","Custom Login Logo – Easily Add a Logo to Your WordPress Login Page","1.2.0","Harish Chouhan","https:\u002F\u002Fprofiles.wordpress.org\u002Fhchouhan\u002F","\u003Cp>Custom Login Logo lets you replace the default WordPress login logo with your own — no need to touch code or upload files via FTP.\u003C\u002Fp>\n\u003Cp>Just activate the plugin and use the built-in media uploader on the settings page to upload your custom login logo. It’s quick, simple, and works with most themes.\u003C\u002Fp>\n\u003Cp>This plugin is perfect for branding client sites, personalising the login screen, or maintaining a consistent visual identity.\u003C\u002Fp>\n\u003Cp>Features:\u003Cbr \u002F>\n– Upload your custom logo using the built-in WordPress media uploader\u003Cbr \u002F>\n– No need for FTP or coding\u003Cbr \u002F>\n– Works with most themes and setups\u003Cbr \u002F>\n– Retina\u002Fhigh-DPI image compatible\u003Cbr \u002F>\n– Lightweight and fast\u003C\u002Fp>\n\u003Cp>If you find this plugin useful, please consider leaving a 5-star review on WordPress.org.\u003C\u002Fp>\n","Easily add a custom logo to your WordPress login page using the built-in media uploader.",2000,53848,82,13,"2025-07-29T01:47:00.000Z","6.0","7.4",[130,20,21,131,132],"custom-login","login-screen","wordpress-login","https:\u002F\u002Fthemeist.com\u002Fplugins\u002Fwordpress\u002Fcustom-login-logo\u002F#utm_source=wp-plugin&utm_medium=custom-login-logo&utm_campaign=plugins-page","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-login-logo.1.2.0.zip",{"slug":136,"name":137,"version":138,"author":139,"author_profile":140,"description":141,"short_description":142,"active_installs":143,"downloaded":144,"rating":86,"num_ratings":27,"last_updated":145,"tested_up_to":146,"requires_at_least":147,"requires_php":148,"tags":149,"homepage":152,"download_link":153,"security_score":154,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":29},"logo-switcher","Logo Switcher","2.1","Leander Iversen","https:\u002F\u002Fprofiles.wordpress.org\u002Fleanderiversen\u002F","\u003Cp>Logo Switcher is a super lightweight plugin that easily allow the implementation of a chosen logo in your theme. By default, the plugin automatically includes the chosen logo on the login screen, but the plugin behavior can be controlled by a simple filter. To get started, simply download and activate the plugin, then hover over \u003Cstrong>Appearance\u003C\u002Fstrong> and click on \u003Cstrong>Customize\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Ch4>How to use\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>\u003C?php \n\n\u002F\u002F https:\u002F\u002Fwww.example.com\u002Fwp-content\u002Fuploads\u002FYYYY\u002FMM\u002Flogo.png\n   echo logo_switcher_url();\n\n\u002F\u002F \u003Ca href=\"https:\u002F\u002Fwww.example.com\u002F\" title=\"Your Website Name\" rel=\"home\">\u003Cimg src=\"https:\u002F\u002Fwww.example.com\u002Fwp-content\u002Fuploads\u002FYYYY\u002FMM\u002Flogo.png\" alt=\"Your Website Name\">\u003C\u002Fa>      \n   logo_switcher_link_tag();\n\n\u002F\u002F \u003Cimg src=\"https:\u002F\u002Fwww.example.com\u002Fwp-content\u002Fuploads\u002FYYYY\u002FMM\u002Flogo.png\" class=\"example-class\" alt=\"Your Website Name\">\n   logo_switcher_image_tag($classes = array());\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>Like the plugin?\u003C\u002Fh4>\n\u003Cp>If you like the plugin, please review it. Every review is highly appreciated, but if you have a suggestion on how to make the plugin better, please send an email to info@carpe-noctem.no.\u003C\u002Fp>\n","Logo Switcher allows you to easily implement your own logo in your Wordpress theme.",900,30256,"2020-06-25T15:13:00.000Z","5.4.19","4.0","5.6",[20,21,150,151,136],"logo","logo-controller","https:\u002F\u002Fgithub.com\u002FIversenCarpeNoctem\u002Flogo-switcher","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flogo-switcher.2.1.zip",85,{"attackSurface":156,"codeSignals":201,"taintFlows":259,"riskAssessment":260,"analyzedAt":271},{"hooks":157,"ajaxHandlers":197,"restRoutes":198,"shortcodes":199,"cronEvents":200,"entryPointCount":13,"unprotectedCount":13},[158,164,169,173,177,181,185,189,193],{"type":159,"name":160,"callback":161,"file":162,"line":163},"filter","admin_body_class","iwllc_admin_body_class","ideal-wp-login-logo-changer.php",39,{"type":165,"name":166,"callback":167,"file":162,"line":168},"action","admin_head","iwllc_styles_option_page",65,{"type":165,"name":170,"callback":171,"file":162,"line":172},"admin_init","iwllc_register_custom_logo_settings",81,{"type":165,"name":174,"callback":175,"file":162,"line":176},"admin_menu","iwllc_register_login_logo_setting_page",87,{"type":165,"name":178,"callback":179,"file":162,"line":180},"admin_enqueue_scripts","iwllc_backend_scripts",257,{"type":165,"name":182,"callback":183,"file":162,"line":184},"login_head","iwllc_wordpress_custom_login_logo",345,{"type":159,"name":186,"callback":187,"file":162,"line":188},"login_headerurl","iwllc_login_url",363,{"type":165,"name":190,"callback":191,"file":162,"line":192},"iwllc_settings_start","iwllc_reset_settings",389,{"type":159,"name":194,"callback":195,"file":162,"line":196},"login_body_class","iwllc_add_class_login_page",397,[],[],[],[],{"dangerousFunctions":202,"sqlUsage":203,"outputEscaping":205,"fileOperations":13,"externalRequests":13,"nonceChecks":27,"capabilityChecks":13,"bundledLibraries":258},[],{"prepared":13,"raw":13,"locations":204},[],{"escaped":206,"rawEcho":207,"locations":208},26,24,[209,212,214,216,218,220,222,224,226,228,230,232,234,236,238,240,242,244,246,248,250,252,254,256],{"file":162,"line":210,"context":211},104,"raw output",{"file":162,"line":213,"context":211},105,{"file":162,"line":215,"context":211},116,{"file":162,"line":217,"context":211},122,{"file":162,"line":219,"context":211},125,{"file":162,"line":221,"context":211},126,{"file":162,"line":223,"context":211},132,{"file":162,"line":225,"context":211},138,{"file":162,"line":227,"context":211},144,{"file":162,"line":229,"context":211},147,{"file":162,"line":231,"context":211},157,{"file":162,"line":233,"context":211},164,{"file":162,"line":235,"context":211},167,{"file":162,"line":237,"context":211},168,{"file":162,"line":239,"context":211},174,{"file":162,"line":241,"context":211},177,{"file":162,"line":243,"context":211},183,{"file":162,"line":245,"context":211},186,{"file":162,"line":247,"context":211},192,{"file":162,"line":249,"context":211},195,{"file":162,"line":251,"context":211},201,{"file":162,"line":253,"context":211},204,{"file":162,"line":255,"context":211},210,{"file":162,"line":257,"context":211},213,[],[],{"summary":261,"deductions":262},"The \"ideal-wp-login-logo-changer\" plugin v1.1.10 exhibits a mixed security posture.  While the static analysis reveals a commendable lack of dangerous functions, SQL queries are prepared, and a nonce check is present, there are notable areas for concern. The output escaping is only 52% properly done, indicating a potential for cross-site scripting (XSS) vulnerabilities if unsanitized data reaches output functions.  Furthermore, the absence of capability checks on any entry points is a significant weakness, as it suggests that unauthenticated or low-privileged users might be able to trigger plugin functionality, even if the attack surface appears small initially.\n\nThe vulnerability history is particularly concerning, with one known medium-severity CVE related to Cross-Site Request Forgery (CSRF). The fact that this vulnerability was last patched relatively recently (2025-03-27) and is now unpatched in this version suggests a pattern of potentially introducing vulnerabilities or failing to maintain up-to-date patches. The absence of critical and high-severity CVEs is positive, but the presence of even a medium vulnerability, especially one that is now unpatched, warrants attention.\n\nOverall, while the plugin avoids common pitfalls like raw SQL or exposed AJAX\u002FREST endpoints, the poor output escaping and lack of capability checks create exploitable avenues, especially when considered alongside the past CSRF vulnerability. The plugin's security is only partially robust, and users should be cautious due to the unpatched medium vulnerability and the identified code quality issues.",[263,266,268],{"reason":264,"points":265},"Unpatched medium severity CVE",15,{"reason":267,"points":52},"Low output escaping percentage",{"reason":269,"points":270},"No capability checks on entry points",10,"2026-03-16T19:21:17.772Z",{"wat":273,"direct":280},{"assetPaths":274,"generatorPatterns":276,"scriptPaths":277,"versionParams":278},[275],"\u002Fwp-content\u002Fplugins\u002Fideal-wp-login-logo-changer\u002Fjs\u002Fcustomizer.js",[],[275],[279],"ideal-wp-login-logo-changer\u002Fjs\u002Fcustomizer.js?ver=",{"cssClasses":281,"htmlComments":285,"htmlAttributes":286,"restEndpoints":303,"jsGlobals":304,"shortcodeOutput":305},[282,283,284],"idllc-option-page","iwllc_current_logo","iwllc_current_bg",[],[287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302],"iwllc_wp_logo_url","iwllc-upload-btn","iwllc-logo","iwllc_wp_set_bg","iwllc_wp_bg_select","type_color","iwllc_wp_bg_color","data-default-color","type_image","iwllc_wp_bg_img_url","iwllc-bg","iwllc_wp_logo_link","iwllc_wp_link_color","iwllc_wp_link_hover_color","iwllc_wp_logo_width","iwllc_wp_logo_height",[],[287,290,293,296,298,299,300,301,302,302],[]]