[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftMb5rBqn4JnewfA-sWX9ZP7MjzOVnUJRNESEPT2Vxpo":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":115,"crawl_stats":38,"alternatives":123,"analysis":206,"fingerprints":1005},"loginpress","LoginPress | wp-login Custom Login Page Customizer","6.1.2","Adnan","https:\u002F\u002Fprofiles.wordpress.org\u002Fhiddenpearls\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fpricing?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=text-links\" rel=\"friend nofollow ugc\">LoginPress Plugin\u003C\u002Fa> by LoginPress holds a lot of customization fields to change the layout of the login page of WordPress. You can modify the look and feel of login page completely even the login error messages, forgot error messages, registration error messages, forget password hint message and many more.\u003Cbr \u002F>\nLoginPress Plugin would give you and your users a feeling that it is a custom login page and a part of the site layout. You must checkout the Demo video of how you can customize WordPress login page.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Getting Started video for customizing login page using LoginPress\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FGMAwsHomJlE?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fpricing?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=text-links\" rel=\"nofollow ugc\">Why You Should Upgrade to LoginPress Pro?\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\n    \u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F9snT9rWxO4g?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fpricing?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=text-links\" rel=\"nofollow ugc\">Checkout the Pro version\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>LoginPress plugin is built using The Customizer API which is getting popular for live-previewing any changes to the layouts of WordPress. So, with LoginPress you can preview your login page changes instantly. This login customizer plugin is easy enough & required no coding skills. Just have options for each element on the login form and make a new customized login page within seconds.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fdocumentation\u002F?utm_source=wp-org&utm_medium=description&utm_campaign=user-guide&utm_content=Documentation+link\" rel=\"nofollow ugc\">LoginPress Documentation\u003C\u002Fa>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>Multilingual & Translatable\u003Cbr \u002F>\n  WPML Compatible\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Cstrong>LoginPress Addons:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>We have a collection of great Free and Pro addons that makes LoginPress more powerful. Upgrade to Pro package and enjoy the show.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fadd-ons\u002Flogin-logout-menu\u002F?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=login-logout-menu\" rel=\"nofollow ugc\">Login Logout Menu (FREE)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fadd-ons\u002Fsocial-login\u002F?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=social-login\" rel=\"nofollow ugc\">Social Login\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fadd-ons\u002Flogin-widget\u002F?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=login-widget\" rel=\"nofollow ugc\">Login Widget\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fadd-ons\u002Flogin-redirects\u002F?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=login-redirect\" rel=\"nofollow ugc\">Login Redirects\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fadd-ons\u002Flimit-login-attempts\u002F?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=limit-login-attempts\" rel=\"nofollow ugc\">Limit Login Attempts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fadd-ons\u002Fhide-login\u002F?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=hide-login\" rel=\"nofollow ugc\">Hide Login\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fadd-ons\u002Fauto-login\u002F?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=auto-login\" rel=\"nofollow ugc\">Auto Login\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>LoginPress Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>Logo: Can change the login logo {image, width, height, padding, URL and Title}.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Background: You can customize background Image or Color. Set its position, Size and repeatable property.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Login Form: Even you can customize the login form {image or color, width, height, padding and border}. More over customize Input Text Field {width, margin, text color, label color and background color}.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Forget Form: Beauty of the plugin here you can change the background or color of the forget form.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Button: You can set the color of your button WYSIWYG.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Error Messages: Main Feature of the plugin. You can change the error log messages as you want to show users form LoginPress \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Error Messages.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Welcome Messages: Same as error log messages you can customize the welcome messages from LoginPress \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Welcome Messages.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Form Footer: After the login Button, here is form footer. You can customize the footer {text, display, text decoration, text color, text hover color and text size}. In this section you can also customize the page footer text.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Making WordPress Login page mobile friendly after customization\u003C\u002Fstrong>\u003Cbr \u002F>\n  This plugin is also responsive. It means that when you customize login page, It will look good on mobile i.e It is Responsive.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Cstrong>LoginPress Features in Detail:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Customize login error messages. You can change every error message whether it is on login form, forgot password form, register form or reset password form.\u003C\u002Fli>\n\u003Cli>Customize login logo image.\u003C\u002Fli>\n\u003Cli>Customize login logo image width.\u003C\u002Fli>\n\u003Cli>Customize login logo image height.\u003C\u002Fli>\n\u003Cli>Customize login logo image hover title.\u003C\u002Fli>\n\u003Cli>Customize login logo image hover link.\u003C\u002Fli>\n\u003Cli>Customize login logo padding bottom.\u003C\u002Fli>\n\u003Cli>Customize login page background image.\u003C\u002Fli>\n\u003Cli>Customize login page background color.\u003C\u002Fli>\n\u003Cli>Background Gallery with a selected set of HD Backgrounds for Login Screen.\u003C\u002Fli>\n\u003Cli>Customize login page background image size.\u003C\u002Fli>\n\u003Cli>Customize login page without background image. You can keep it simple with different login form style.\u003C\u002Fli>\n\u003Cli>Customize login form width.\u003C\u002Fli>\n\u003Cli>Customize login form height.\u003C\u002Fli>\n\u003Cli>Customize login form border style.\u003C\u002Fli>\n\u003Cli>Customize login form input styling.\u003C\u002Fli>\n\u003Cli>Customize login form label styling.\u003C\u002Fli>\n\u003Cli>Customize login form field text color.\u003C\u002Fli>\n\u003Cli>Customize login form background color.\u003C\u002Fli>\n\u003Cli>Customize login page “lost your password?” text.\u003C\u002Fli>\n\u003Cli>Customize login forgot password form background color and image.\u003C\u002Fli>\n\u003Cli>Customize login form button styling.\u003C\u002Fli>\n\u003Cli>Customize login form notice messages.\u003C\u002Fli>\n\u003Cli>Add copyright notice message at the bottom of login page.\u003C\u002Fli>\n\u003Cli>Customize “Back to” text at login page. You can hide or show or change the color or even the text size as well.\u003C\u002Fli>\n\u003Cli>Customize login page footer. We call login page footer area under the login form fields.\u003C\u002Fli>\n\u003Cli>LoginPress has a Custom CSS area which can Customize login page in more advanced way. Recommended for advanced users.\u003C\u002Fli>\n\u003Cli>Customize your login page in more advanced way using our Custom JS area. Add your JS there and make your login page more advanced.\u003C\u002Fli>\n\u003Cli>Customize login page with unlimited features available in LoginPress.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>After going through this extensive list of features you can imagine Why LoginPress is the best login page customizer in the WordPress market.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Beautify and Innovate your WordPress login page without any coding knowledge!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch3>Languages compatible\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Arabic\u003C\u002Fli>\n\u003Cli>Chinese (Traditional)\u003C\u002Fli>\n\u003Cli>Dutch\u003C\u002Fli>\n\u003Cli>Spanish\u003C\u002Fli>\n\u003Cli>French Translated by \u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fjean.scheider\" rel=\"friend nofollow ugc\">Jean Scheider\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Dutch (Netherlands) Translated by \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fharm10\u002F\" rel=\"friend nofollow ugc\">Harm10\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Russian Translated by \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fsatone667\" rel=\"friend nofollow ugc\">satone667\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Portuguese (Brazil) Translated by \u003Ca href=\"https:\u002F\u002Fen.gravatar.com\u002Frmcbrothers\" rel=\"friend nofollow ugc\">Rodrigo\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Polish (Poland) Translated by \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fxszejdi\u002F\" rel=\"friend nofollow ugc\">Mateusz\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>What’s Next\u003C\u002Fh4>\n\u003Cp>If you like this plugin, then consider checking out our other amazing plugins:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fanalytify.io\u002Fref\u002F73\u002F?utm_source=loginpress&utm_medium=readme&utm_campaign=pro-upgrade\" title=\"Google Analytics by Analytify\" rel=\"friend nofollow ugc\">Analytify – Google Analytics WordPress Plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Frelated-posts-thumbnails\u002F\" title=\"Related Posts\" rel=\"friend ugc\">WordPress Related Posts\u003C\u002Fa> – Best Related Posts Plugin\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsimplesocialbuttons.com?utm_source=loginpress&utm_medium=readme&utm_campaign=pro-upgrade\" title=\"Simple Social Buttons\" rel=\"friend nofollow ugc\">Simple Social Buttons\u003C\u002Fa> – Simple Social Sharing WordPress Plugin\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwpbrigade.com\u002Frecommend\u002Fmaintenance-mode?utm_source=loginpress&utm_medium=readme&utm_campaign=pro-upgrade\" rel=\"nofollow ugc\">Under Construction, Coming Soon & Maintenance Mode\u003C\u002Fa> – Plugin for Under construction & Coming soon page\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-headers-and-footers\u002F\" rel=\"ugc\">Insert Scripts in Headers and Footers\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Notes\u003C\u002Fh3>\n\u003Cp>LoginPress is absolutely, positively the most \u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fpricing?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=text-links\" title=\"Best Custom login form plugin\" rel=\"friend nofollow ugc\">beginner friendly WordPress custom login form plugin\u003C\u002Fa> on the market. It is both easy and powerful.\u003C\u002Fp>\n\u003Cp>Also, I’m the founder of \u003Ca href=\"https:\u002F\u002FWPBrigade.com\u002F?utm_source=loginpress-lite\" rel=\"friend nofollow ugc\">WPBrigade\u003C\u002Fa>, We do custom WordPress themes for clients and can transform any website in WordPress. It was a huge priority for me to make a WordPress custom login form plugin that beginners can use without any training.\u003C\u002Fp>\n\u003Cp>I feel that we have done that here. I hope you enjoy using LoginPress.\u003C\u002Fp>\n\u003Cp>Thank you\u003C\u002Fp>\n\u003Cp>Muhammad Adnan\u003C\u002Fp>\n","LoginPress is a Custom Login Page Customizer plugin allows you to easily customize the layout of login, admin login, client login, register pages.",200000,7238986,96,1063,"2026-02-11T20:15:00.000Z","6.9.4","4.0","",[20,21,22,23,24],"custom-login","login","login-customizer","wordpress-login","wp-login","https:\u002F\u002Floginpress.pro?utm_source=loginpress-lite&utm_medium=plugin-header&utm_campaign=pro-upgrade&utm_content=plugin-uri","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Floginpress.6.1.2.zip",94,6,0,"2025-03-13 00:00:00","2026-03-15T15:16:48.613Z",[33,49,65,79,92,105],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48},"CVE-2025-1764","loginpress-cross-site-request-forgery-to-arbitrary-options-update","LoginPress \u003C= 3.3.1 - Cross-Site Request Forgery to Arbitrary Options Update","The LoginPress | wp-login Custom Login Page Customizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.1. This is due to missing or incorrect nonce validation on the 'custom_plugin_set_option' function. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. The 'WPBRIGADE_SDK__DEV_MODE' constant must be set to 'true' to exploit the vulnerability.",null,"\u003C=3.3.1","4.0.0","high",7.5,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H","Cross-Site Request Forgery (CSRF)","2025-03-14 05:24:02",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F9df6a2b4-2dc4-43dd-8282-5c05b0fa13f6?source=api-prod",1,{"id":50,"url_slug":51,"title":52,"description":53,"plugin_slug":4,"theme_slug":38,"affected_versions":54,"patched_in_version":55,"severity":56,"cvss_score":57,"cvss_vector":58,"vuln_type":59,"published_date":60,"updated_date":61,"references":62,"days_to_patch":64},"CVE-2022-41839","loginpress-custom-login-page-customizer-missing-authorization-to-settings-changes","LoginPress | Custom Login Page Customizer \u003C= 1.6.2 - Missing Authorization to Settings Changes","The LoginPress plugin for WordPress is vulnerable to authorization bypass due to a missing capability checks in versions up to, and including, 1.6.2. This makes it possible for unauthenticated attackers to change the Opt-In or Opt-Out tracking settings.","\u003C=1.6.2","1.6.3","medium",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Missing Authorization","2022-11-07 00:00:00","2024-01-22 19:56:02",[63],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fd212c19d-fca9-4daf-95f4-5b3ac302e817?source=api-prod",442,{"id":66,"url_slug":67,"title":68,"description":69,"plugin_slug":4,"theme_slug":38,"affected_versions":70,"patched_in_version":71,"severity":56,"cvss_score":72,"cvss_vector":73,"vuln_type":74,"published_date":75,"updated_date":61,"references":76,"days_to_patch":78},"CVE-2022-0347","loginpress-reflected-cross-site-scripting-via-redirect-page-parameter","LoginPress \u003C= 1.5.11 - Reflected Cross-Site Scripting via redirect-page Parameter","The LoginPress | Custom Login Page Customizer WordPress plugin before 1.5.12 does not escape the redirect-page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting","\u003C1.5.12","1.5.12",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2022-02-14 00:00:00",[77],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F5df2dfcd-2fda-4f09-bd77-f437422d20bb?source=api-prod",708,{"id":80,"url_slug":81,"title":82,"description":83,"plugin_slug":4,"theme_slug":38,"affected_versions":84,"patched_in_version":85,"severity":56,"cvss_score":86,"cvss_vector":87,"vuln_type":59,"published_date":88,"updated_date":61,"references":89,"days_to_patch":91},"CVE-2019-15871","loginpress-custom-login-page-customizer-unauthorized-settings-update","LoginPress | Custom Login Page Customizer \u003C= 1.1.13 - Unauthorized Settings Update","The LoginPress plugin before 1.1.4 for WordPress has no capability check for updates to settings.","\u003C=1.1.13","1.1.14",6.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L","2019-07-11 00:00:00",[90],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fefbecb4b-fc41-4719-be5e-af11b47ff683?source=api-prod",1657,{"id":93,"url_slug":94,"title":95,"description":96,"plugin_slug":4,"theme_slug":38,"affected_versions":97,"patched_in_version":98,"severity":56,"cvss_score":99,"cvss_vector":100,"vuln_type":74,"published_date":101,"updated_date":61,"references":102,"days_to_patch":104},"WF-65fc55bb-2b86-466a-b43b-554628283f02-loginpress","loginpress-authenticated-stored-cross-site-scripting","LoginPress \u003C= 1.1.15 - Authenticated Stored Cross-SIte Scripting","The LoginPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.1.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","\u003C1.1.16","1.1.16",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","2018-12-07 00:00:00",[103],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F65fc55bb-2b86-466a-b43b-554628283f02?source=api-prod",1873,{"id":106,"url_slug":107,"title":108,"description":109,"plugin_slug":4,"theme_slug":38,"affected_versions":97,"patched_in_version":98,"severity":41,"cvss_score":110,"cvss_vector":111,"vuln_type":112,"published_date":101,"updated_date":61,"references":113,"days_to_patch":104},"CVE-2019-15872","loginpress-authenticated-sql-injection-via-settings-import","LoginPress \u003C= 1.1.15 - Authenticated SQL Injection via Settings Import","The LoginPress plugin for WordPress is vulnerable to blind SQL Injection via Settings Import in versions up to, and including, 1.1.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')",[114],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F74386b2f-9686-4f55-be30-c02ea8fb12b0?source=api-prod",{"slug":116,"display_name":7,"profile_url":8,"plugin_count":117,"total_installs":118,"avg_security_score":119,"avg_patch_time_days":120,"trust_score":121,"computed_at":122},"hiddenpearls",11,660150,97,526,77,"2026-04-03T21:56:10.399Z",[124,141,160,175,193],{"slug":125,"name":126,"version":127,"author":128,"author_profile":129,"description":130,"short_description":131,"active_installs":132,"downloaded":133,"rating":29,"num_ratings":29,"last_updated":134,"tested_up_to":135,"requires_at_least":136,"requires_php":18,"tags":137,"homepage":138,"download_link":139,"security_score":140,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"mywp-login-form","MyWP Login Form","1.1","Whodunit","https:\u002F\u002Fprofiles.wordpress.org\u002Fwhodunitagency\u002F","\u003Ch4>The easiest way to add a WordPress Login Form into your website\u003C\u002Fh4>\n\u003Cp>Create your own WordPress Login Page using MyWP Login Form and native Gutenberg Blocks.\u003C\u002Fp>\n\u003Cp>With MyWP Login Form you can easily:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>add your login form with the provided Gutenberg Block or shortcode\u003C\u002Fli>\n\u003Cli>choose between vertical or horizontal layout\u003C\u002Fli>\n\u003Cli>define your URL redirection after loggin\u003C\u002Fli>\n\u003Cli>customize Fields and Button settings\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can also play with other Blocks Builders as Stackable, Coblocks, or Kadence to build a creative login page.\u003C\u002Fp>\n\u003Cp>MyWP Login Form is compatible with All Themes: if you have any issue, you can use the support and we’ll fix it 🙂\u003C\u002Fp>\n\u003Cp>To add you custom Login Form with the default options, all you need to do is use the shortcode:[mywp_login_form]\u003Cbr \u002F>\nCheck out all the shortcodes available in our documentation page.\u003C\u002Fp>\n\u003Ch3>About us\u003C\u002Fh3>\n\u003Cp>“MyWP Login Form” is one of the WordPress Plugins made by \u003Ca href=\"https:\u002F\u002Fwww.whodunit.agency\u002F\" rel=\"nofollow ugc\">Whodunit Agency.\u003C\u002Fa>\u003Cbr \u002F>\nWhodunit is a full-remote French WordPress agency. Founded in 2009, we are deeply involved in open-source development. Whodunit is the biggest agency in France in terms of contribution to WordPress ecosystem.\u003Cbr \u002F>\nWe are building tailor-made editorial experiences for our clients and also providing high-level maintenance services. This activity is strongly dependent on our involvement in WordPress core development.\u003C\u002Fp>\n\u003Ch3>Next features\u003C\u002Fh3>\n\u003Cp>If you have some dreams, ideas, or suggestions, send here in the support forum your wishes.\u003C\u002Fp>\n\u003Ch3>Languages \u002F Localization\u003C\u002Fh3>\n\u003Cp>MyWP Login Form is translated into English (UK) (English (UK)) and Français (French (France)).\u003C\u002Fp>\n\u003Cp>If you would like to translate the form into your language, please \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fmywp-login-form\" rel=\"nofollow ugc\">click here\u003C\u002Fa>.\u003C\u002Fp>\n","Your Login Form anywhere within WordPress.",30,2087,"2023-07-19T11:01:00.000Z","5.9.13","5.0",[20,21,22,23,24],"https:\u002F\u002Fwww.whodunit.fr\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmywp-login-form.1.1.zip",85,{"slug":142,"name":143,"version":144,"author":145,"author_profile":146,"description":147,"short_description":148,"active_installs":149,"downloaded":150,"rating":29,"num_ratings":29,"last_updated":151,"tested_up_to":152,"requires_at_least":153,"requires_php":154,"tags":155,"homepage":157,"download_link":158,"security_score":159,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"advanced-login-page-customizer","Advanced Login Page Customizer","1.1.3","Rakesh Lawaju (Racase)","https:\u002F\u002Fprofiles.wordpress.org\u002Fracase\u002F","\u003Cp>Elevate your WordPress experience with the Advanced Login Page Customizer plugin. Create a personalized, branded login page with custom layouts, logos, colors, backgrounds, and more. Create a smooth login experience with complete control and flexibility by adding videos, modifying forms, and adjusting layouts.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch4>Live Preview:\u003C\u002Fh4>\n\u003Cp>Easily modify your login page and see updates in real-time. Make immediate adjustments to layouts, colors, and other features to make sure your design is flawless before it goes live.\u003C\u002Fp>\n\u003Ch4>Prebuild Templates:\u003C\u002Fh4>\n\u003Cp>Choose from a great collection of prebuilt templates that will help you customize your login page quickly. Each design is customizable, so you can quickly change the colors, logos, and layouts to match your brand identity.\u003C\u002Fp>\n\u003Ch4>Custom Logo:\u003C\u002Fh4>\n\u003Cp>Easily upload and display your logo on the login screen to add a personal touch. Adjust its size, padding, and margins to ensure it complements your overall design. Improve your branding and provide a memorable login experience for your users.\u003C\u002Fp>\n\u003Ch4>Background Customization:\u003C\u002Fh4>\n\u003Cp>Customize your login page’s background completely. Create a compelling backdrop by using brilliant colors, and gorgeous gradients, or even uploading photographs and videos. Adjust positioning, repeat settings, and sizes to obtain the ideal design that complements your company identity.\u003C\u002Fp>\n\u003Ch4>Form Customization:\u003C\u002Fh4>\n\u003Cp>Customize your login forms with a range of design choices to give users a distinctive experience. Text fields, buttons, and checkboxes can all have their colors, backgrounds, and dimensions changed. Make sure your forms are visually appealing and user-friendly by controlling spacing and alignment to provide a seamless and captivating login experience for each user.\u003C\u002Fp>\n\u003Ch4>Form Fields Customization:\u003C\u002Fh4>\n\u003Cp>Enhance your login forms with detailed customization options for each field. Text fields, checkboxes, and dropdowns should be colored, sized, and spaced to match the style of your brand. Create a user-friendly interface that not only looks good but also functions well, delivering a smooth login experience for your users.\u003C\u002Fp>\n\u003Ch4>Custom Scripts:\u003C\u002Fh4>\n\u003Cp>The Custom CSS function provides complete design flexibility. Customize your login page beyond the normal options by adding your own CSS rules. Adjust styles, layouts, and interactions to generate a distinct look that is precisely aligned with your brand. Whether you’re a developer or a designer, this feature allows you to build a genuinely personalized user experience.\u003C\u002Fp>\n\u003Ch4>Import & Export Option:\u003C\u002Fh4>\n\u003Cp>The Import & Export feature allows you to easily maintain your personalization settings. Transfer your login page designs between WordPress sites with ease. This feature allows you to save time and maintain consistency across various installations, ensuring that your branding is consistent no matter where it is applied.\u003C\u002Fp>\n\u003Ch4>Custom Error\u002F Info Messages:\u003C\u002Fh4>\n\u003Cp>Personalize user interactions by changing the error and information messages on your login page. Tailor the wording to provide clear instructions and improve the user experience, making visitors feel supported throughout the login process. Change the colors and designs to match your logo, creating a unified and reassuring environment for users.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Third-Party services:\u003C\u002Fstrong>\u003Cbr \u002F>\nWe offer functionality that helps you embed YouTube videos as your login page background. This functionality is optional. Please read \u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fstatic?template=terms\" rel=\"nofollow ugc\">YouTube’s terms\u003C\u002Fa> and conditions before using this feature.\u003C\u002Fp>\n\u003Ch4>Release Notes:\u003C\u002Fh4>\n\u003Cp>Before updating the plugin please check \u003Ca href=\"https:\u002F\u002Foneloopstudio.com\u002Fwordpress-plugins\u002Fadvanced-login-page-customizer\u002F\" rel=\"nofollow ugc\">our latest release notes\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support, \u003Ca href=\"https:\u002F\u002Foneloopstudio.com\u002Fwordpress-plugins\u002Fadvanced-login-page-customizer\u002F#support\" rel=\"nofollow ugc\">go to our support page\u003C\u002Fa>.\u003C\u002Fp>\n","Personalize, White label & Rebrand your login page without any coding. Easy setup and live preview.",10,1590,"2024-12-09T07:23:00.000Z","6.7.5","6.0","5.5",[156,20,22,23,24],"block","https:\u002F\u002Foneloopstudio.com\u002Fwordpress-plugins\u002Fadvanced-login-page-customizer\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadvanced-login-page-customizer.1.1.3.zip",92,{"slug":161,"name":162,"version":163,"author":164,"author_profile":165,"description":166,"short_description":167,"active_installs":149,"downloaded":168,"rating":29,"num_ratings":29,"last_updated":18,"tested_up_to":169,"requires_at_least":136,"requires_php":170,"tags":171,"homepage":18,"download_link":172,"security_score":173,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":174},"primelogin-pro","PrimeLogin Pro | Login Page Customizer","1.0.3","Fernando Filho","https:\u002F\u002Fprofiles.wordpress.org\u002Fcyferweb\u002F","\u003Cp>Customize your WordPress login with custom logo, background, colors & split-screen layouts. Fully responsive, secure & code-free. Free version.\u003Cbr \u002F>\n\u003Cstrong>Template 1:\u003C\u002Fstrong> Modern, minimalist design.\u003Cbr \u002F>\n\u003Cstrong>Template 2:\u003C\u002Fstrong> Exclusive split-screen layout (60% image, 40% form) that reinforces your branding and boosts conversions.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Intuitive admin panel to adjust logo, background, colors, spacing, and button and link texts.\u003C\u002Fli>\n\u003Cli>Responsive layouts optimized for any device.\u003C\u002Fli>\n\u003Cli>Secure, code-free customization—no coding skills required.\u003C\u002Fli>\n\u003Cli>Elevate your site’s branding and conversion with a unique, impactful login experience!\u003C\u002Fli>\n\u003C\u002Fol>\n","Customize your WordPress login with custom logo, background, colors & split-screen layouts. Fully responsive, secure & code-free. Free version.",483,"6.8.5","7.0",[20,21,22,23,24],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fprimelogin-pro.1.0.3.zip",100,"2026-03-15T10:48:56.248Z",{"slug":176,"name":177,"version":178,"author":179,"author_profile":180,"description":181,"short_description":182,"active_installs":149,"downloaded":183,"rating":29,"num_ratings":29,"last_updated":184,"tested_up_to":152,"requires_at_least":185,"requires_php":186,"tags":187,"homepage":18,"download_link":192,"security_score":159,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"secure-admin-login-with-customize","Secure Admin Login With Customize","1.4","Dilip Bheda","https:\u002F\u002Fprofiles.wordpress.org\u002Fdilipbheda\u002F","\u003Cp>Create your own custom admin login page with google recaptcha and captcha code.\u003C\u002Fp>\n\u003Cp>Plugin allows to change custom logo with replace with wordpress default logo, background color, background image, background slide show, form color, font size, login form position and many more features.\u003C\u002Fp>\n\u003Cp>Supports full features.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>You can add Google Recaptcha in your wordpress admin form (Site Key & Secret Key are required).\u003C\u002Fli>\n\u003Cli>You can add Captcha Code in your wordpress admin form.\u003C\u002Fli>\n\u003Cli>You can add customer logo above wordpress admin form.\u003C\u002Fli>\n\u003Cli>You can add background color and background image to the wordpress admin form.\u003C\u002Fli>\n\u003Cli>You can add custom message\u002Ftext above & bottom of your wordpress admin login form.\u003C\u002Fli>\n\u003Cli>Free support.\u003C\u002Fli>\n\u003Cli>Multi-lingual support.\u003C\u002Fli>\n\u003Cli>Translation ready (Gujarati, Hindi).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Main features.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Google Recaptcha.\u003C\u002Fli>\n\u003Cli>Captcha Code.\u003C\u002Fli>\n\u003Cli>Login button hover color.\u003C\u002Fli>\n\u003Cli>Login button color.\u003C\u002Fli>\n\u003Cli>Admin form custom color.\u003C\u002Fli>\n\u003Cli>Admin form border custom style.\u003C\u002Fli>\n\u003Cli>Admin form label size.\u003C\u002Fli>\n\u003Cli>Admin form opacity.\u003C\u002Fli>\n\u003Cli>Admin form custom background image.\u003C\u002Fli>\n\u003Cli>Change label color.\u003C\u002Fli>\n\u003Cli>Change login form color.\u003C\u002Fli>\n\u003Cli>Set custom background image.\u003C\u002Fli>\n\u003Cli>Set background color.\u003C\u002Fli>\n\u003Cli>Add custom logo to admin login form.\u003C\u002Fli>\n\u003Cli>Logo width.\u003C\u002Fli>\n\u003Cli>Logo height.\u003C\u002Fli>\n\u003Cli>Logo link.\u003C\u002Fli>\n\u003Cli>Logo title.\u003C\u002Fli>\n\u003C\u002Ful>\n","Secure admin login with customize allows you to customize your WordPress admin login page within WordPress customizer.",2092,"2025-01-29T16:32:00.000Z","5.9","7.2",[188,189,190,191,22],"custom-admin-login","custom-login-logo","custom-wp-login","customise-wordpress-login","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsecure-admin-login-with-customize.1.4.zip",{"slug":194,"name":195,"version":144,"author":196,"author_profile":197,"description":198,"short_description":199,"active_installs":149,"downloaded":200,"rating":173,"num_ratings":201,"last_updated":202,"tested_up_to":152,"requires_at_least":136,"requires_php":18,"tags":203,"homepage":204,"download_link":205,"security_score":173,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"wp-admin-logo-customization","LoginSuite – WordPress Login Page Customizer","Ruhul Amin","https:\u002F\u002Fprofiles.wordpress.org\u002Fruhul105\u002F","\u003Cp>LoginSuite allows you to completely customize your WordPress login page. Change the logo, background colors, add background images, and customize text colors to match your brand identity.We highly recommend checking out the demo video to see how easily you can customize your WordPress login page.\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FpKTdyIz7z1s?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Custom login logo upload with easy removal\u003C\u002Fli>\n\u003Cli>Custom logo link configuration\u003C\u002Fli>\n\u003Cli>Background color customization with color picker\u003C\u002Fli>\n\u003Cli>Background image upload with advanced settings:\n\u003Cul>\n\u003Cli>Multiple background sizes (cover, contain, auto)\u003C\u002Fli>\n\u003Cli>Background repeat options (no-repeat, repeat, repeat-x, repeat-y)\u003C\u002Fli>\n\u003Cli>Background position control (9 different positions)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Text color customization\u003C\u002Fli>\n\u003Cli>Form field border color customization\u003C\u002Fli>\n\u003Cli>Button background color customization\u003C\u002Fli>\n\u003Cli>Custom login redirect URL\u003C\u002Fli>\n\u003Cli>One-click reset options for colors\u003C\u002Fli>\n\u003Cli>Responsive design\u003C\u002Fli>\n\u003Cli>Easy to use interface\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Video Tutorial\u003C\u002Fh3>\n\u003Cp>Watch our video tutorial to learn how to use LoginSuite:\u003Cbr \u002F>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FpKTdyIz7z1s?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>Learn how to:\u003Cbr \u002F>\n* Install and activate the plugin\u003Cbr \u002F>\n* Upload and customize your login logo\u003Cbr \u002F>\n* Set up background colors and images\u003Cbr \u002F>\n* Configure text colors\u003Cbr \u002F>\n* Use advanced background image settings\u003Cbr \u002F>\n* Reset to default settings\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>Logo Customization:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Click “Choose File” to upload your logo\u003C\u002Fli>\n\u003Cli>Use the X icon to remove existing logo\u003C\u002Fli>\n\u003Cli>Recommended logo size: 320px width for best results\u003C\u002Fli>\n\u003Cli>Set custom URL for logo link (optional)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Background Color:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Use the color picker to choose a background color\u003C\u002Fli>\n\u003Cli>Click “Reset to Default” to return to white\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Text Color:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Use the color picker to choose text color\u003C\u002Fli>\n\u003Cli>Click “Reset to Default” to return to default WordPress color\u003C\u002Fli>\n\u003Cli>Affects all text and links on the login page\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Background Image:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Upload any image as background\u003C\u002Fli>\n\u003Cli>Configure background settings:\n\u003Cul>\n\u003Cli>Size: Cover, Contain, or Auto\u003C\u002Fli>\n\u003Cli>Repeat: No Repeat, Repeat All, Repeat Horizontally, or Repeat Vertically\u003C\u002Fli>\n\u003Cli>Position: 9 different position options\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Use checkbox to remove background image\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Form Customization:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Customize form field border color\u003C\u002Fli>\n\u003Cli>Customize button background color\u003C\u002Fli>\n\u003Cli>Reset options available for all colors\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Login Redirect:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Set custom URL for redirect after successful login\u003C\u002Fli>\n\u003Cli>Leave empty to use default WordPress behavior\u003C\u002Fli>\n\u003Cli>Supports both internal and external URLs\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support, please visit http:\u002F\u002Fwww.ruhulamin.me\u002F\u003C\u002Fp>\n","Easily customize your WordPress login page with custom logo, background colors, images, and more.",3425,2,"2025-05-04T04:01:00.000Z",[20,21,22,23,24],"http:\u002F\u002Fwww.ruhulamin.me\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-admin-logo-customization.1.1.3.zip",{"attackSurface":207,"codeSignals":623,"taintFlows":810,"riskAssessment":991,"analyzedAt":1004},{"hooks":208,"ajaxHandlers":610,"restRoutes":620,"shortcodes":621,"cronEvents":622,"entryPointCount":201,"unprotectedCount":48},[209,215,220,224,229,233,238,243,247,251,253,257,261,265,270,275,279,282,285,289,293,295,298,301,304,309,313,316,320,323,328,332,336,339,343,346,350,354,358,361,365,368,371,375,378,382,386,390,394,398,402,405,410,414,418,422,427,430,432,436,440,443,447,450,453,456,460,462,465,468,471,475,479,483,487,491,495,499,503,507,511,514,517,522,527,531,534,537,540,544,547,549,552,555,559,562,565,567,572,575,578,582,585,587,591,594,598,602,604,606],{"type":210,"name":211,"callback":212,"file":213,"line":214},"action","init","addons_options_array","classes\\class-loginpress-addons-meta.php",33,{"type":210,"name":216,"callback":217,"file":218,"line":219},"register_form","loginpress_reg_password_fields","classes\\class-loginpress-custom-password.php",61,{"type":210,"name":221,"callback":222,"file":218,"line":223},"register_new_user","loginpress_default_password_nag",62,{"type":225,"name":226,"callback":227,"priority":149,"file":218,"line":228},"filter","registration_errors","loginpress_reg_pass_errors",63,{"type":225,"name":230,"callback":231,"priority":117,"file":218,"line":232},"wp_new_user_notification_email","loginpress_new_user_email_notification",64,{"type":225,"name":234,"callback":235,"priority":149,"file":236,"line":237},"loginpress_remember_me","loginpress_remember_me_callback","classes\\class-loginpress-developer-hooks.php",41,{"type":210,"name":239,"callback":240,"priority":241,"file":236,"line":242},"login_form","loginpress_login_form",99,57,{"type":210,"name":244,"callback":245,"priority":241,"file":236,"line":246},"login_head","unset_remember_me_option",60,{"type":210,"name":248,"callback":249,"file":250,"line":228},"user_register","loginpress_update_expire_duration","classes\\class-loginpress-force-password-reset.php",{"type":210,"name":252,"callback":249,"priority":149,"file":250,"line":232},"after_password_reset",{"type":210,"name":254,"callback":255,"priority":149,"file":250,"line":256},"profile_update","loginpress_user_profile_update",65,{"type":210,"name":258,"callback":259,"priority":149,"file":250,"line":260},"wp_login","loginpress_user_login_check",66,{"type":225,"name":262,"callback":263,"priority":149,"file":250,"line":264},"login_message","loginpress_reset_pass_message_text",67,{"type":225,"name":266,"callback":267,"priority":268,"file":269,"line":246},"authenticate","loginpress_login_order",20,"classes\\class-loginpress-login-order.php",{"type":210,"name":271,"callback":272,"file":273,"line":274},"admin_init","loginpress_review_notice","classes\\class-loginpress-notifications.php",45,{"type":210,"name":276,"callback":277,"file":273,"line":278},"admin_notices","loginpress_review_notice_message",76,{"type":210,"name":276,"callback":280,"file":273,"line":281},"loginpress_addon_notice_text",260,{"type":210,"name":276,"callback":283,"file":273,"line":284},"loginpress_appsumo_notice_text",314,{"type":210,"name":226,"callback":286,"priority":149,"file":287,"line":288},"validate_password_requirements","classes\\class-loginpress-password-strength.php",55,{"type":210,"name":290,"callback":291,"file":287,"line":292},"login_enqueue_scripts","loginpress_password_strength_meter",58,{"type":210,"name":294,"callback":286,"priority":149,"file":287,"line":219},"validate_password_reset",{"type":225,"name":296,"callback":297,"file":287,"line":232},"password_hint","loginpress_password_hint",{"type":225,"name":299,"callback":300,"priority":149,"file":287,"line":264},"woocommerce_get_script_data","loginpress_wc_reset_password_hint",{"type":225,"name":299,"callback":302,"priority":149,"file":287,"line":303},"loginpress_wc_reset_remove_hint",69,{"type":225,"name":305,"callback":306,"priority":149,"file":307,"line":308},"loginpress_settings_tab","loginpress_promotion_tab","classes\\class-loginpress-promotion-tabs.php",42,{"type":210,"name":310,"callback":310,"file":311,"line":312},"admin_enqueue_scripts","classes\\class-loginpress-settings-api.php",54,{"type":210,"name":271,"callback":314,"file":315,"line":274},"loginpress_setting_init","classes\\class-loginpress-setup.php",{"type":210,"name":317,"callback":318,"file":315,"line":319},"admin_menu","loginpress_setting_menu",46,{"type":210,"name":276,"callback":321,"file":315,"line":322},"loginpress_show_custom_dashboard_popup",47,{"type":225,"name":324,"callback":325,"priority":241,"file":326,"line":327},"login_title","login_page_title","classes\\customizer\\class-loginpress-customizer.php",114,{"type":225,"name":329,"callback":330,"file":326,"line":331},"login_headerurl","login_page_logo_url",115,{"type":225,"name":333,"callback":334,"file":326,"line":335},"login_headertitle","login_page_logo_title",117,{"type":225,"name":337,"callback":334,"file":326,"line":338},"login_headertext",119,{"type":225,"name":340,"callback":341,"file":326,"line":342},"login_errors","login_error_messages",122,{"type":225,"name":262,"callback":344,"priority":48,"file":326,"line":345},"change_welcome_message",123,{"type":210,"name":347,"callback":348,"file":326,"line":349},"customize_register","customize_login_panel",124,{"type":210,"name":351,"callback":352,"file":326,"line":353},"login_footer","login_page_custom_footer",125,{"type":225,"name":355,"callback":356,"priority":48,"file":326,"line":357},"site_icon_meta_tags","login_page_custom_favicon",126,{"type":210,"name":244,"callback":359,"file":326,"line":360},"login_page_custom_head",127,{"type":210,"name":362,"callback":363,"file":326,"line":364},"woocommerce_login_form","loginpress_wc_login_page_url_redirection",128,{"type":210,"name":211,"callback":366,"file":326,"line":367},"redirect_to_custom_page",129,{"type":210,"name":317,"callback":369,"priority":149,"file":326,"line":370},"menu_url",130,{"type":225,"name":372,"callback":373,"priority":149,"file":326,"line":374},"wp_login_errors","remove_error_messages_in_wp_customizer",131,{"type":210,"name":290,"callback":376,"file":326,"line":377},"loginpress_login_page_scripts",132,{"type":225,"name":379,"callback":380,"file":326,"line":381},"login_display_language_dropdown","loginpress_language_switch",135,{"type":210,"name":383,"callback":384,"file":326,"line":385},"customize_controls_enqueue_scripts","loginpress_customizer_js",141,{"type":210,"name":387,"callback":388,"file":326,"line":389},"customize_preview_init","loginpress_customizer_previewer_js",151,{"type":225,"name":391,"callback":392,"priority":149,"file":326,"line":393},"woocommerce_process_login_errors","loginpress_woo_login_errors",152,{"type":225,"name":395,"callback":396,"priority":149,"file":326,"line":397},"sanitize_user","loginpress_sanitize_username",158,{"type":225,"name":399,"callback":400,"priority":268,"file":326,"line":401},"gettext","change_lostpassword_message",535,{"type":225,"name":399,"callback":403,"priority":268,"file":326,"line":404},"change_username_label",536,{"type":210,"name":406,"callback":407,"file":408,"line":409},"customize_controls_print_styles","loginpress_presets_control_css","classes\\customizer\\class-loginpress-presets.php",407,{"type":210,"name":406,"callback":411,"file":412,"line":413},"loginpress_promo_control_css","classes\\customizer\\class-loginpress-promo.php",175,{"type":210,"name":406,"callback":415,"file":416,"line":417},"loginpress_gallery_control_css","classes\\customizer\\controls\\class-loginpress-background-gallery-control.php",195,{"type":210,"name":383,"callback":419,"file":420,"line":421},"loginpress_enqueue_spacing_controls_styles","classes\\customizer\\controls\\class-loginpress-spacing-control.php",39,{"type":225,"name":423,"callback":424,"priority":117,"file":425,"line":426},"lostpassword_url","loginpress_reset_pass_url_in_notify","classes\\customizer\\loginpress-customizer-layout-trait.php",240,{"type":210,"name":276,"callback":428,"file":429,"line":342},"settings_reset_message","classes\\traits\\loginpress-rest-trait.php",{"type":210,"name":276,"callback":428,"file":431,"line":278},"classes\\traits\\loginpress-settings-trait.php",{"type":210,"name":433,"callback":434,"file":431,"line":435},"admin_head","loginpressicon",108,{"type":225,"name":211,"callback":437,"priority":48,"file":438,"line":439},"loginpress_upgrade_1_0_22","include\\class-loginpress-compatibility.php",18,{"type":210,"name":211,"callback":441,"priority":48,"file":438,"line":442},"loginpress_upgrade_3_0_3",23,{"type":210,"name":444,"callback":445,"priority":173,"file":438,"line":446},"wp_print_scripts","dequeue_conflicted_script",110,{"type":210,"name":329,"callback":448,"file":438,"line":449},"remove_conflicted_action",111,{"type":210,"name":211,"callback":451,"file":438,"line":452},"enqueue_loginpress_compatibility_script",112,{"type":210,"name":454,"callback":455,"priority":149,"file":438,"line":335},"plugins_loaded","plugins_loaded_remove_action",{"type":210,"name":211,"callback":457,"priority":458,"file":438,"line":459},"loginpress_webarx_compatibility",9,118,{"type":210,"name":290,"callback":461,"priority":241,"file":438,"line":353},"dequeue_login_page_conflicting_scripts",{"type":225,"name":463,"callback":464,"priority":173,"file":438,"line":377},"template_include","template_include_ob",{"type":210,"name":211,"callback":466,"file":438,"line":467},"aiowps_login_init_remove_action",139,{"type":210,"name":244,"callback":469,"file":438,"line":470},"lp_remove_filter_buddyboss",146,{"type":225,"name":472,"callback":473,"priority":149,"file":438,"line":474},"whl_logged_in_redirect","wps_hide_login_compatibility",153,{"type":225,"name":476,"callback":477,"file":438,"line":478},"wps_hide_login_before_redirect","wps_hide_login_redirect",154,{"type":225,"name":480,"callback":481,"priority":458,"file":438,"line":482},"wp_redirect","wp_redirect_remove_filter",266,{"type":225,"name":484,"callback":485,"priority":458,"file":438,"line":486},"site_url","site_url_remove_filter",267,{"type":225,"name":488,"callback":489,"priority":458,"file":438,"line":490},"network_site_url","network_site_url_remove_filter",268,{"type":210,"name":492,"callback":493,"priority":458,"file":438,"line":494},"wp_loaded","wp_loaded_remove_action",269,{"type":225,"name":496,"callback":497,"file":438,"line":498},"option_aio_wp_security_configs","aiowps_filter_options",456,{"type":210,"name":500,"callback":501,"file":438,"line":502},"password_protected_login_head","enqueue_loginpress_script",492,{"type":225,"name":504,"callback":505,"file":438,"line":506},"password_protected_login_headerurl","password_protected_login_headerurl_cb",493,{"type":225,"name":508,"callback":509,"file":438,"line":510},"password_protected_login_headertitle","password_protected_login_headertitle_cb",494,{"type":225,"name":226,"callback":512,"priority":149,"file":513,"line":260},"loginpress_reg_allow_disallow","include\\class-loginpress-domains.php",{"type":225,"name":515,"callback":516,"priority":149,"file":513,"line":264},"loginpress_social_login_register_email","loginpress_login_allow_disallow",{"type":210,"name":518,"callback":519,"priority":149,"file":520,"line":521},"wpmu_new_blog","loginpress_new_site_created","include\\class-loginpress-page-create.php",53,{"type":225,"name":523,"callback":524,"file":525,"line":526},"page_attributes_dropdown_pages_args","register_project_templates","include\\class-loginpress-theme-template.php",68,{"type":225,"name":528,"callback":529,"file":525,"line":530},"theme_page_templates","add_new_template",71,{"type":225,"name":532,"callback":524,"file":525,"line":533},"wp_insert_post_data",75,{"type":225,"name":463,"callback":535,"file":525,"line":536},"view_project_template",78,{"type":210,"name":454,"callback":538,"file":525,"line":539},"closure",166,{"type":210,"name":454,"callback":541,"file":542,"line":543},"dismiss","include\\class-remote-notification-client.php",113,{"type":210,"name":545,"callback":546,"priority":173,"file":542,"line":335},"admin_print_styles","style",{"type":210,"name":276,"callback":548,"file":542,"line":459},"show_notices",{"type":210,"name":550,"callback":551,"file":542,"line":338},"admin_footer","script",{"type":225,"name":553,"callback":554,"priority":149,"file":542,"line":345},"heartbeat_received","heartbeat",{"type":210,"name":216,"callback":556,"file":557,"line":558},"loginpress_add_privacy_policy_field","include\\privacy-policy.php",13,{"type":225,"name":226,"callback":560,"priority":149,"file":557,"line":561},"loginpress_privacy_policy_auth",16,{"type":210,"name":244,"callback":563,"file":564,"line":260},"wp_no_robots","include\\template-loginpress.php",{"type":210,"name":244,"callback":566,"file":564,"line":526},"wp_login_viewport_meta",{"type":210,"name":568,"callback":569,"file":570,"line":571},"rest_api_init","loginpress_register_routes","loginpress.php",255,{"type":210,"name":317,"callback":573,"file":570,"line":574},"register_options_page",256,{"type":210,"name":211,"callback":576,"file":570,"line":577},"textdomain",257,{"type":225,"name":579,"callback":580,"priority":149,"file":570,"line":581},"plugin_row_meta","_row_meta",258,{"type":210,"name":310,"callback":583,"file":570,"line":584},"_admin_scripts",259,{"type":210,"name":550,"callback":586,"file":570,"line":281},"add_deactivate_modal",{"type":225,"name":588,"callback":589,"priority":149,"file":570,"line":590},"plugin_action_links","loginpress_action_links",261,{"type":210,"name":271,"callback":592,"file":570,"line":593},"redirect_optin",262,{"type":225,"name":595,"callback":596,"priority":149,"file":570,"line":597},"auth_cookie_expiration","_change_auth_cookie_expiration",263,{"type":210,"name":599,"callback":600,"file":570,"line":601},"wp_wpb_sdk_after_uninstall","plugin_uninstallation",264,{"type":210,"name":271,"callback":603,"file":570,"line":482},"redirect_loginpress_edit_page",{"type":210,"name":271,"callback":605,"file":570,"line":486},"check_loginpress_page",{"type":225,"name":607,"callback":608,"file":570,"line":609},"wpseo_exclude_from_sitemap_by_post_ids","loginpress_exclude_from_sitemap",284,[611,617],{"action":612,"nopriv":613,"callback":614,"hasNonce":615,"hasCapCheck":615,"file":315,"line":616},"dismiss_notification",false,"loginpress_handle_notification_dismiss",true,48,{"action":618,"nopriv":613,"callback":619,"hasNonce":613,"hasCapCheck":613,"file":542,"line":342},"rdn_fetch_notifications","remote_get_notice_ajax",[],[],[],{"dangerousFunctions":624,"sqlUsage":625,"outputEscaping":637,"fileOperations":627,"externalRequests":627,"nonceChecks":268,"capabilityChecks":808,"bundledLibraries":809},[],{"prepared":626,"raw":627,"locations":628},8,3,[629,633,635],{"file":630,"line":631,"context":632},"classes\\class-loginpress-ajax.php",377,"$wpdb->get_results() with variable interpolation",{"file":520,"line":530,"context":634},"$wpdb->get_col() with variable interpolation",{"file":636,"line":292,"context":634},"include\\uninstall.php",{"escaped":638,"rawEcho":639,"locations":640},1135,89,[641,644,645,647,649,651,653,655,658,659,660,662,664,666,668,670,672,673,674,676,678,679,681,683,685,687,689,691,693,695,697,699,700,702,704,706,708,709,711,713,715,717,719,721,723,725,727,729,731,733,735,737,739,741,743,745,746,748,750,751,753,754,756,758,760,762,764,766,768,771,773,775,777,779,781,783,785,787,789,790,791,793,795,797,799,801,803,805,807],{"file":642,"line":452,"context":643},"classes\\class-loginpress-addons.php","raw output",{"file":642,"line":327,"context":643},{"file":642,"line":646,"context":643},140,{"file":642,"line":648,"context":643},163,{"file":642,"line":650,"context":643},204,{"file":642,"line":652,"context":643},303,{"file":630,"line":654,"context":643},430,{"file":656,"line":657,"context":643},"classes\\class-loginpress-deprecated-addons.php",104,{"file":656,"line":446,"context":643},{"file":656,"line":459,"context":643},{"file":656,"line":661,"context":643},208,{"file":656,"line":663,"context":643},215,{"file":656,"line":665,"context":643},223,{"file":656,"line":667,"context":643},224,{"file":656,"line":669,"context":643},235,{"file":656,"line":671,"context":643},236,{"file":656,"line":281,"context":643},{"file":656,"line":590,"context":643},{"file":656,"line":675,"context":643},275,{"file":656,"line":677,"context":643},376,{"file":656,"line":631,"context":643},{"file":656,"line":680,"context":643},385,{"file":656,"line":682,"context":643},386,{"file":656,"line":684,"context":643},397,{"file":656,"line":686,"context":643},398,{"file":656,"line":688,"context":643},399,{"file":656,"line":690,"context":643},425,{"file":656,"line":692,"context":643},437,{"file":656,"line":694,"context":643},451,{"file":656,"line":696,"context":643},453,{"file":656,"line":698,"context":643},491,{"file":656,"line":506,"context":643},{"file":656,"line":701,"context":643},522,{"file":656,"line":703,"context":643},546,{"file":273,"line":705,"context":643},342,{"file":311,"line":707,"context":643},239,{"file":311,"line":281,"context":643},{"file":311,"line":710,"context":643},277,{"file":311,"line":712,"context":643},297,{"file":311,"line":714,"context":643},337,{"file":311,"line":716,"context":643},372,{"file":311,"line":718,"context":643},394,{"file":311,"line":720,"context":643},415,{"file":311,"line":722,"context":643},432,{"file":311,"line":724,"context":643},445,{"file":311,"line":726,"context":643},477,{"file":311,"line":728,"context":643},497,{"file":311,"line":730,"context":643},513,{"file":311,"line":732,"context":643},529,{"file":311,"line":734,"context":643},542,{"file":311,"line":736,"context":643},556,{"file":311,"line":738,"context":643},570,{"file":311,"line":740,"context":643},584,{"file":311,"line":742,"context":643},696,{"file":311,"line":744,"context":643},954,{"file":315,"line":27,"context":643},{"file":315,"line":747,"context":643},387,{"file":315,"line":749,"context":643},388,{"file":315,"line":749,"context":643},{"file":326,"line":752,"context":643},485,{"file":416,"line":646,"context":643},{"file":755,"line":667,"context":643},"css\\style-login.php",{"file":755,"line":757,"context":643},1362,{"file":759,"line":442,"context":643},"css\\style-presets.php",{"file":759,"line":761,"context":643},26,{"file":542,"line":763,"context":643},426,{"file":542,"line":765,"context":643},519,{"file":542,"line":767,"context":643},521,{"file":769,"line":770,"context":643},"include\\loginpress-optin-form.php",457,{"file":769,"line":772,"context":643},462,{"file":769,"line":774,"context":643},469,{"file":769,"line":776,"context":643},481,{"file":769,"line":778,"context":643},482,{"file":769,"line":780,"context":643},484,{"file":769,"line":782,"context":643},486,{"file":769,"line":784,"context":643},487,{"file":769,"line":786,"context":643},489,{"file":769,"line":788,"context":643},490,{"file":769,"line":502,"context":643},{"file":769,"line":506,"context":643},{"file":769,"line":792,"context":643},495,{"file":769,"line":794,"context":643},496,{"file":564,"line":796,"context":643},238,{"file":564,"line":798,"context":643},249,{"file":564,"line":800,"context":643},290,{"file":564,"line":802,"context":643},580,{"file":564,"line":804,"context":643},745,{"file":806,"line":237,"context":643},"js\\script-login.php",{"file":806,"line":322,"context":643},22,[],[811,828,839,851,861,879,896,906,916,926,935,946,960],{"entryPoint":812,"graph":813,"unsanitizedCount":29,"severity":827},"activate_addon (classes\\class-loginpress-ajax.php:88)",{"nodes":814,"edges":825},[815,819],{"id":816,"type":817,"label":818,"file":630,"line":159},"n0","source","$_POST (x3)",{"id":820,"type":821,"label":822,"file":630,"line":823,"wp_function":824},"n1","sink","echo() [XSS]",107,"echo",[826],{"from":816,"to":820,"sanitized":615},"low",{"entryPoint":829,"graph":830,"unsanitizedCount":29,"severity":827},"deactivate_addon (classes\\class-loginpress-ajax.php:144)",{"nodes":831,"edges":837},[832,835],{"id":816,"type":817,"label":833,"file":630,"line":834},"$_POST",148,{"id":820,"type":821,"label":822,"file":630,"line":836,"wp_function":824},173,[838],{"from":816,"to":820,"sanitized":615},{"entryPoint":840,"graph":841,"unsanitizedCount":29,"severity":827},"import (classes\\class-loginpress-ajax.php:191)",{"nodes":842,"edges":849},[843,845],{"id":816,"type":817,"label":844,"file":630,"line":650},"$_FILES",{"id":820,"type":821,"label":846,"file":630,"line":847,"wp_function":848},"file_get_contents() [SSRF\u002FLFI]",205,"file_get_contents",[850],{"from":816,"to":820,"sanitized":615},{"entryPoint":852,"graph":853,"unsanitizedCount":29,"severity":827},"video_url (classes\\class-loginpress-ajax.php:566)",{"nodes":854,"edges":859},[855,857],{"id":816,"type":817,"label":833,"file":630,"line":856},573,{"id":820,"type":821,"label":822,"file":630,"line":858,"wp_function":824},576,[860],{"from":816,"to":820,"sanitized":615},{"entryPoint":862,"graph":863,"unsanitizedCount":29,"severity":827},"youtube_video_url (classes\\class-loginpress-ajax.php:588)",{"nodes":864,"edges":876},[865,867,871,873],{"id":816,"type":817,"label":833,"file":630,"line":866},594,{"id":820,"type":821,"label":868,"file":630,"line":869,"wp_function":870},"wp_remote_get() [SSRF]",596,"wp_remote_get",{"id":872,"type":817,"label":833,"file":630,"line":866},"n2",{"id":874,"type":821,"label":822,"file":630,"line":875,"wp_function":824},"n3",598,[877,878],{"from":816,"to":820,"sanitized":615},{"from":872,"to":874,"sanitized":615},{"entryPoint":880,"graph":881,"unsanitizedCount":29,"severity":827},"\u003Cclass-loginpress-ajax> (classes\\class-loginpress-ajax.php:0)",{"nodes":882,"edges":892},[883,885,886,887,888,890],{"id":816,"type":817,"label":884,"file":630,"line":159},"$_POST (x6)",{"id":820,"type":821,"label":822,"file":630,"line":823,"wp_function":824},{"id":872,"type":817,"label":844,"file":630,"line":650},{"id":874,"type":821,"label":846,"file":630,"line":847,"wp_function":848},{"id":889,"type":817,"label":833,"file":630,"line":866},"n4",{"id":891,"type":821,"label":868,"file":630,"line":869,"wp_function":870},"n5",[893,894,895],{"from":816,"to":820,"sanitized":615},{"from":872,"to":874,"sanitized":615},{"from":889,"to":891,"sanitized":615},{"entryPoint":897,"graph":898,"unsanitizedCount":29,"severity":827},"loginpress_review_notice_message (classes\\class-loginpress-notifications.php:137)",{"nodes":899,"edges":904},[900,902],{"id":816,"type":817,"label":901,"file":273,"line":385},"$_SERVER (x3)",{"id":820,"type":821,"label":822,"file":273,"line":903,"wp_function":824},156,[905],{"from":816,"to":820,"sanitized":615},{"entryPoint":907,"graph":908,"unsanitizedCount":29,"severity":827},"loginpress_addon_notice_text (classes\\class-loginpress-notifications.php:172)",{"nodes":909,"edges":914},[910,912],{"id":816,"type":817,"label":911,"file":273,"line":413},"$_SERVER",{"id":820,"type":821,"label":822,"file":273,"line":913,"wp_function":824},180,[915],{"from":816,"to":820,"sanitized":615},{"entryPoint":917,"graph":918,"unsanitizedCount":29,"severity":827},"loginpress_friday_sale_notice_text (classes\\class-loginpress-notifications.php:325)",{"nodes":919,"edges":924},[920,922],{"id":816,"type":817,"label":911,"file":273,"line":921},328,{"id":820,"type":821,"label":822,"file":273,"line":923,"wp_function":824},334,[925],{"from":816,"to":820,"sanitized":615},{"entryPoint":927,"graph":928,"unsanitizedCount":29,"severity":827},"\u003Cclass-loginpress-notifications> (classes\\class-loginpress-notifications.php:0)",{"nodes":929,"edges":933},[930,932],{"id":816,"type":817,"label":931,"file":273,"line":385},"$_SERVER (x6)",{"id":820,"type":821,"label":822,"file":273,"line":903,"wp_function":824},[934],{"from":816,"to":820,"sanitized":615},{"entryPoint":936,"graph":937,"unsanitizedCount":48,"severity":827},"\u003Cloginpress-optin-form> (include\\loginpress-optin-form.php:0)",{"nodes":938,"edges":944},[939,942],{"id":816,"type":817,"label":940,"file":769,"line":941},"$_GET",448,{"id":820,"type":821,"label":822,"file":769,"line":943,"wp_function":824},458,[945],{"from":816,"to":820,"sanitized":613},{"entryPoint":947,"graph":948,"unsanitizedCount":29,"severity":827},"login_footer (include\\template-loginpress.php:265)",{"nodes":949,"edges":957},[950,953,954,956],{"id":816,"type":817,"label":951,"file":564,"line":952},"$_GET['redirect_to']",371,{"id":820,"type":821,"label":822,"file":564,"line":952,"wp_function":824},{"id":872,"type":817,"label":955,"file":564,"line":631},"$_GET['action']",{"id":874,"type":821,"label":822,"file":564,"line":631,"wp_function":824},[958,959],{"from":816,"to":820,"sanitized":615},{"from":872,"to":874,"sanitized":615},{"entryPoint":961,"graph":962,"unsanitizedCount":48,"severity":827},"\u003Ctemplate-loginpress> (include\\template-loginpress.php:0)",{"nodes":963,"edges":985},[964,965,966,967,968,970,973,976,978,982],{"id":816,"type":817,"label":951,"file":564,"line":952},{"id":820,"type":821,"label":822,"file":564,"line":952,"wp_function":824},{"id":872,"type":817,"label":955,"file":564,"line":631},{"id":874,"type":821,"label":822,"file":564,"line":631,"wp_function":824},{"id":889,"type":817,"label":911,"file":564,"line":969},454,{"id":891,"type":821,"label":971,"file":564,"line":498,"wp_function":972},"update_option() [Settings Manipulation]","update_option",{"id":974,"type":817,"label":818,"file":564,"line":975},"n6",548,{"id":977,"type":821,"label":822,"file":564,"line":736,"wp_function":824},"n7",{"id":979,"type":817,"label":980,"file":564,"line":981},"n8","$_REQUEST",637,{"id":983,"type":821,"label":822,"file":564,"line":984,"wp_function":824},"n9",667,[986,987,988,989,990],{"from":816,"to":820,"sanitized":615},{"from":872,"to":874,"sanitized":615},{"from":889,"to":891,"sanitized":613},{"from":974,"to":977,"sanitized":615},{"from":979,"to":983,"sanitized":615},{"summary":992,"deductions":993},"The LoginPress plugin, version 6.1.2, exhibits a mixed security posture. While it demonstrates good practices in several areas, such as a high percentage of SQL prepared statements and properly escaped output, there are significant concerns that lower its overall security. The presence of AJAX handlers without authentication checks directly exposes a part of the attack surface to potential unauthorized actions. Furthermore, the taint analysis revealing flows with unsanitized paths, although not critical or high severity in this specific analysis, indicates a potential for vulnerabilities if such paths are exploited. The plugin's history of six known CVEs, including high and medium severity vulnerabilities like CSRF, missing authorization, XSS, and SQL injection, is a major red flag. The fact that the last vulnerability was in early 2025 suggests a recurring pattern of security weaknesses despite efforts to patch. This history, coupled with the identified unprotected entry point, indicates a need for continued vigilance and development focus on robust security measures.",[994,996,999,1002],{"reason":995,"points":626},"Unprotected AJAX handler",{"reason":997,"points":998},"Flows with unsanitized paths",7,{"reason":1000,"points":1001},"History of High severity CVEs (2)",15,{"reason":1003,"points":561},"History of Medium severity CVEs (4)","2026-03-16T17:03:05.439Z",{"wat":1006,"direct":1039},{"assetPaths":1007,"generatorPatterns":1015,"scriptPaths":1016,"versionParams":1024},[1008,1009,1010,1011,1012,1013,1014],"\u002Fwp-content\u002Fplugins\u002Floginpress\u002Fcss\u002Ffrontend.css","\u002Fwp-content\u002Fplugins\u002Floginpress\u002Fcss\u002Floginpress-admin.css","\u002Fwp-content\u002Fplugins\u002Floginpress\u002Fcss\u002Fresponsive.css","\u002Fwp-content\u002Fplugins\u002Floginpress\u002Fcss\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Floginpress\u002Fcss\u002Fcustomizer.css","\u002Fwp-content\u002Fplugins\u002Floginpress\u002Fcss\u002Fadmin-bar.css","\u002Fwp-content\u002Fplugins\u002Floginpress\u002Fcss\u002Fbackend.css",[],[1017,1018,1019,1020,1021,1022,1023],"\u002Fwp-content\u002Fplugins\u002Floginpress\u002Fjs\u002Floginpress-customizer.js","\u002Fwp-content\u002Fplugins\u002Floginpress\u002Fjs\u002Floginpress-admin.js","\u002Fwp-content\u002Fplugins\u002Floginpress\u002Fjs\u002Floginpress-customize-color.js","\u002Fwp-content\u002Fplugins\u002Floginpress\u002Fjs\u002Floginpress-frontend.js","\u002Fwp-content\u002Fplugins\u002Floginpress\u002Fjs\u002Floginpress-google-fonts.js","\u002Fwp-content\u002Fplugins\u002Floginpress\u002Fjs\u002Floginpress-admin-bar.js","\u002Fwp-content\u002Fplugins\u002Floginpress\u002Fjs\u002Floginpress-login.js",[1025,1026,1027,1028,1029,1030,1031,1032,1033,1034,1035,1036,1037,1038],"loginpress\u002Fcss\u002Ffrontend.css?ver=","loginpress\u002Fcss\u002Floginpress-admin.css?ver=","loginpress\u002Fcss\u002Fresponsive.css?ver=","loginpress\u002Fcss\u002Fstyle.css?ver=","loginpress\u002Fcss\u002Fcustomizer.css?ver=","loginpress\u002Fcss\u002Fadmin-bar.css?ver=","loginpress\u002Fcss\u002Fbackend.css?ver=","loginpress\u002Fjs\u002Floginpress-customizer.js?ver=","loginpress\u002Fjs\u002Floginpress-admin.js?ver=","loginpress\u002Fjs\u002Floginpress-customize-color.js?ver=","loginpress\u002Fjs\u002Floginpress-frontend.js?ver=","loginpress\u002Fjs\u002Floginpress-google-fonts.js?ver=","loginpress\u002Fjs\u002Floginpress-admin-bar.js?ver=","loginpress\u002Fjs\u002Floginpress-login.js?ver=",{"cssClasses":1040,"htmlComments":1049,"htmlAttributes":1059,"restEndpoints":1062,"jsGlobals":1066,"shortcodeOutput":1072},[4,1041,1042,1043,1044,1045,1046,1047,1048],"loginpress-wrapper","loginpress-social-login","loginpress-login","loginpress-form","loginpress-forgot","loginpress-register","loginpress-customizer","loginpress-dashboard",[1050,1051,1052,1053,1054,1055,1056,1057,1058],"\u003C!-- LoginPress -->","\u003C!-- LoginPress Admin Bar -->","\u003C!-- LoginPress Customizer -->","\u003C!-- LoginPress Social Login -->","\u003C!-- LoginPress Login -->","\u003C!-- LoginPress Form -->","\u003C!-- LoginPress Forgot -->","\u003C!-- LoginPress Register -->","\u003C!-- LoginPress Dashboard -->",[1060,1061],"data-loginpress-id","data-loginpress-url",[1063,1064,1065],"\u002Fwp-json\u002Floginpress\u002Fv1\u002Fsettings","\u002Fwp-json\u002Floginpress\u002Fv1\u002Fcustomizer","\u002Fwp-json\u002Floginpress\u002Fv1\u002Faddons",[1067,1068,1069,1070,1071],"LoginPress_Customizer_Object","LoginPress_Admin_Object","LoginPress_Frontend_Object","LoginPress_Admin_Bar_Object","LoginPress_Login_Object",[]]