[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fykxxZ7nhrRcTI2xAiVcpFTUyNzze5--KlmI7A5MPS8Q":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":63,"crawl_stats":38,"alternatives":71,"analysis":170,"fingerprints":357},"yith-custom-login","YITH Custom Login","1.7.7","YITHEMES","https:\u002F\u002Fprofiles.wordpress.org\u002Fyithemes\u002F","\u003Cp>Install the plugin and change the default style of wordpress login. Set a pretty style to login page of your website and customize it according to your style!\u003Cbr \u002F>\nFull documentation is available \u003Ca href=\"https:\u002F\u002Fdocs.yithemes.com\u002Fyith-custom-login\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Installation\u003C\u002Fh4>\n\u003Cp>Once you have installed the plugin, you just need to activate the plugin in order to enable it.\u003C\u002Fp>\n\u003Ch4>Configuration\u003C\u002Fh4>\n\u003Cp>YITH Custom Login will add a new page under Appearance -> Login Screen, where you can configure the plugin and customize the frontend page.\u003C\u002Fp>\n\u003Ch4>GDPR Disclaimer\u003C\u002Fh4>\n\u003Cp>As you can see in \u003Ca href=\"https:\u002F\u002Fdevelopers.google.com\u002Ffonts\u002Ffaq#what_does_using_the_google_fonts_api_mean_for_the_privacy_of_my_users\" rel=\"nofollow ugc\">Google FAQ\u003C\u002Fa>:\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>The Google Fonts API is designed to limit the collection, storage, and use of end-user data to what is needed to serve fonts efficiently. [â€¦] Google Fonts logs records of the CSS and the font file requests, and access to this data is kept secure. [â€¦] We use data from Googleâ€™s web crawler to detect which websites use Google fonts.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>In other words, when someone visits your website, Google will be able to access the IP address they used to access it. As a result of using Google Fonts, you implicitly accept their terms and conditions, and you must inform people visiting your site of this in accordance with the current GDPR law in Europe.\u003C\u002Fp>\n\u003Ch4>Developer\u003C\u002Fh4>\n\u003Cp>Are you a developer? Want to customize the templates or the style of the plugin? Read on the \u003Ca href=\"https:\u002F\u002Fdocs.yithemes.com\u002Fyith-custom-login\u002F\" rel=\"nofollow ugc\">documentation\u003C\u002Fa> and discover how to do that.\u003C\u002Fp>\n\u003Ch3>Suggestions\u003C\u002Fh3>\n\u003Cp>If you have suggestions about how to improve YITH Custom Login, you can \u003Ca href=\"mailto:plugins@yithemes.com\" title=\"Your Inspiration Themes\" rel=\"nofollow ugc\">write us\u003C\u002Fa> so we can bundle them into YITH Custom Login.\u003C\u002Fp>\n\u003Ch3>Translators\u003C\u002Fh3>\n\u003Ch4>Available Languages\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>English (Default)\u003C\u002Fli>\n\u003Cli>Italian\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you have created your own language pack, or have an update for an existing one, you can send \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FTranslating_WordPress\" title=\"Translating WordPress\" rel=\"nofollow ugc\">gettext PO and MO file\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fyithemes.com\u002Fcontact\u002F\" title=\"Your Inspiration Themes\" rel=\"nofollow ugc\">use\u003C\u002Fa> so we can bundle it into YITH Custom Login Languages.\u003C\u002Fp>\n\u003Ch3>Documentation\u003C\u002Fh3>\n\u003Cp>Full documentation is available \u003Ca href=\"https:\u002F\u002Fdocs.yithemes.com\u002Fyith-custom-login\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fp>\n","YITH Custom Login give you the ability to customize the login page of wordpress.",6000,230692,96,17,"2025-04-24T12:37:00.000Z","6.8.5","6.4","7.4",[20,21,22,23,24],"custom-login","customization","login-screen","themes","wordpress-login","https:\u002F\u002Fyithemes.com\u002Fthemes\u002Fplugins\u002Fyith-custom-login\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fyith-custom-login.1.7.7.zip",99,2,0,"2024-09-12 18:13:16","2026-03-15T15:16:48.613Z",[33,49],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48},"CVE-2024-8665","yith-custom-login-reflected-cross-site-scripting","YITH Custom Login \u003C= 1.7.3 - Reflected Cross-Site Scripting","The YITH Custom Login plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.7.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",null,"\u003C=1.7.3","1.7.4","medium",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-09-13 06:47:26",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F0828a4a4-2dd5-4dff-8563-c81d6b24b949?source=api-prod",1,{"id":50,"url_slug":51,"title":52,"description":53,"plugin_slug":4,"theme_slug":38,"affected_versions":54,"patched_in_version":55,"severity":41,"cvss_score":56,"cvss_vector":57,"vuln_type":44,"published_date":58,"updated_date":59,"references":60,"days_to_patch":62},"CVE-2024-35732","yith-custom-login-authenticated-admin-stored-cross-site-scripting","YITH Custom Login \u003C= 1.7.0 - Authenticated (Admin+) Stored Cross-Site Scripting","The YITH Custom Login plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.7.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.","\u003C=1.7.0","1.7.1",4,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","2024-06-06 00:00:00","2024-06-13 14:32:34",[61],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F5b25908a-d394-4ce8-b853-4bdf643b9b5b?source=api-prod",8,{"slug":64,"display_name":7,"profile_url":8,"plugin_count":65,"total_installs":66,"avg_security_score":67,"avg_patch_time_days":68,"trust_score":69,"computed_at":70},"yithemes",33,1110000,97,411,77,"2026-04-04T00:39:16.828Z",[72,91,110,128,147],{"slug":73,"name":74,"version":75,"author":76,"author_profile":77,"description":78,"short_description":79,"active_installs":80,"downloaded":81,"rating":82,"num_ratings":48,"last_updated":83,"tested_up_to":16,"requires_at_least":84,"requires_php":85,"tags":86,"homepage":88,"download_link":89,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":90,"fetched_at":31},"wip-custom-login","WIP Custom Login","1.3.6","alexvtn","https:\u002F\u002Fprofiles.wordpress.org\u002Falexvtn\u002F","\u003Cp>WIP Custom Login allows you to customize the login section of WordPress and you can replace the admin WordPress logo, set a background image and much more.\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Fw5jFYlFjlz0?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>\u003Cstrong>Premium features.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Default Skins\u003C\u002Fstrong>\u003Cbr \u002F>\n  You can set a default plugin skin and replace the saved options.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Background slideshow\u003C\u002Fstrong>\u003Cbr \u002F>\n  You can create a beautiful body background slideshow and make your admin page unique.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Unlimited colors\u003C\u002Fstrong>\u003Cbr \u002F>\n  You can change the colors of each section, like the login button.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Backup section\u003C\u002Fstrong>\u003Cbr \u002F>\n  You can create a backup of plugin settings ( included the slideshow) or restore the default settings.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Sample data\u003C\u002Fstrong>\u003Cbr \u002F>\n  You can import the preview settings, from the backup section.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>You can get the premium version from the link below:\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwww.themeinprogress.com\u002Fc-login-free-custom-login-wordpress-plugin\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.themeinprogress.com\u002Fc-login-free-custom-login-wordpress-plugin\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Installation\u003C\u002Fh4>\n\u003Cp>Once you have installed the plugin, you just need to activate the plugin in order to enable it.\u003C\u002Fp>\n\u003Ch4>Configuration\u003C\u002Fh4>\n\u003Cp>WIP Custom Login will add a new admin page, where you can customize the login page.\u003C\u002Fp>\n\u003Ch3>Translators\u003C\u002Fh3>\n\u003Ch4>Available Languages\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>English (Default)\u003C\u002Fli>\n\u003Cli>Italiano\u003C\u002Fli>\n\u003C\u002Ful>\n","WIP Custom Login allows you to customize the login section of WordPress and you can replace the admin WordPress logo, set a background image and much  &hellip;",800,71529,60,"2025-04-23T12:44:00.000Z","3.5.0","",[20,21,87,23,24],"plugins","https:\u002F\u002Fwww.themeinprogress.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwip-custom-login.1.3.6.zip","2023-05-22 00:00:00",{"slug":92,"name":93,"version":94,"author":95,"author_profile":96,"description":97,"short_description":98,"active_installs":29,"downloaded":99,"rating":29,"num_ratings":29,"last_updated":85,"tested_up_to":16,"requires_at_least":100,"requires_php":18,"tags":101,"homepage":106,"download_link":107,"security_score":108,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":109},"login-screen-designer","Login Screen Designer","1.0.0","Devmont Digital","https:\u002F\u002Fprofiles.wordpress.org\u002Fdevmontdigital\u002F","\u003Cp>\u003Cstrong>Login Screen Designer\u003C\u002Fstrong> is a lightweight plugin that allows you to personalize the WordPress login screen effortlessly. From customizing the logo to adjusting background colors and welcome messages, it provides essential tools to match the login page with your brand identity.\u003C\u002Fp>\n\u003Cp>🎯 \u003Cstrong>Use Cases:\u003C\u002Fstrong>\u003Cbr \u002F>\n– White-label WordPress login page for clients\u003Cbr \u002F>\n– Match login page design to your brand or website\u003Cbr \u002F>\n– Improve the user experience for custom logins\u003C\u002Fp>\n\u003Cp>🚀 \u003Cstrong>Core Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Upload a custom logo for the login page\u003C\u002Fli>\n\u003Cli>Change background image or color\u003C\u002Fli>\n\u003Cli>Customize the login form background and text styles\u003C\u002Fli>\n\u003Cli>Live preview settings inside the admin\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>🛠️ \u003Cstrong>Admin Panel:\u003C\u002Fstrong>\u003Cbr \u002F>\n– Dedicated settings page under *Login Screen Designer**\u003Cbr \u002F>\n– Instant preview of login page changes\u003Cbr \u002F>\n– Easy-to-use color pickers and text fields\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPLv2 or later.\u003C\u002Fp>\n","Customize WordPress login page branding—logo, background, colors, and messages. A simple and effective tool for personalizing the login experience.",144,"6.0",[102,20,103,104,105],"admin-login-customization","login-screen-design","login-page-customizer","wordpress-login-branding","https:\u002F\u002Fdevmontdigital.io\u002Fwordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flogin-screen-designer.1.0.0.zip",100,"2026-03-15T10:48:56.248Z",{"slug":111,"name":112,"version":113,"author":114,"author_profile":115,"description":116,"short_description":117,"active_installs":118,"downloaded":119,"rating":120,"num_ratings":121,"last_updated":122,"tested_up_to":16,"requires_at_least":100,"requires_php":18,"tags":123,"homepage":126,"download_link":127,"security_score":108,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"custom-login-logo","Custom Login Logo – Easily Add a Logo to Your WordPress Login Page","1.2.0","Harish Chouhan","https:\u002F\u002Fprofiles.wordpress.org\u002Fhchouhan\u002F","\u003Cp>Custom Login Logo lets you replace the default WordPress login logo with your own — no need to touch code or upload files via FTP.\u003C\u002Fp>\n\u003Cp>Just activate the plugin and use the built-in media uploader on the settings page to upload your custom login logo. It’s quick, simple, and works with most themes.\u003C\u002Fp>\n\u003Cp>This plugin is perfect for branding client sites, personalising the login screen, or maintaining a consistent visual identity.\u003C\u002Fp>\n\u003Cp>Features:\u003Cbr \u002F>\n– Upload your custom logo using the built-in WordPress media uploader\u003Cbr \u002F>\n– No need for FTP or coding\u003Cbr \u002F>\n– Works with most themes and setups\u003Cbr \u002F>\n– Retina\u002Fhigh-DPI image compatible\u003Cbr \u002F>\n– Lightweight and fast\u003C\u002Fp>\n\u003Cp>If you find this plugin useful, please consider leaving a 5-star review on WordPress.org.\u003C\u002Fp>\n","Easily add a custom logo to your WordPress login page using the built-in media uploader.",2000,53848,82,13,"2025-07-29T01:47:00.000Z",[20,124,125,22,24],"custom-logo","login-logo","https:\u002F\u002Fthemeist.com\u002Fplugins\u002Fwordpress\u002Fcustom-login-logo\u002F#utm_source=wp-plugin&utm_medium=custom-login-logo&utm_campaign=plugins-page","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-login-logo.1.2.0.zip",{"slug":129,"name":130,"version":131,"author":132,"author_profile":133,"description":134,"short_description":135,"active_installs":29,"downloaded":136,"rating":29,"num_ratings":29,"last_updated":137,"tested_up_to":138,"requires_at_least":100,"requires_php":18,"tags":139,"homepage":144,"download_link":145,"security_score":146,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"custom-login-logo-and-url","Custom Login Logo and URL","1.0","Al Imran Akash","https:\u002F\u002Fprofiles.wordpress.org\u002Fal-imran-akash\u002F","\u003Cp>\u003Cstrong>Custom Login Logo and URL\u003C\u002Fstrong> is a powerful WordPress plugin that allows you to effortlessly customize the login logo and URL in your WordPress website. With this plugin, you can add your own logo and modify the login URL to match your branding and enhance the user experience.\u003C\u002Fp>\n\u003Cp>By replacing the default WordPress login logo with your custom logo, you can create a professional and cohesive look throughout your website. Tailor the login experience to reflect your brand identity and leave a lasting impression on your users.\u003C\u002Fp>\n\u003Cp>With the ability to set a custom login URL, you can reinforce your website’s unique identity and improve security by making it more difficult for unauthorized access. Choose a login URL that aligns with your brand or website, making it easier for users to remember and enhancing your search engine visibility.\u003C\u002Fp>\n\u003Cp>👉 \u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Custom Login Logo:\u003C\u002Fstrong> Replace the default WordPress login logo with your own custom logo, effortlessly aligning it with your brand identity.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Logo Size Control:\u003C\u002Fstrong> Adjust the height, width, and border radius of the logo to achieve the perfect fit and style for your login page.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Login URL:\u003C\u002Fstrong> Modify the login URL to a unique and branded URL, enhancing security and improving user experience.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Login URL Title:\u003C\u002Fstrong> Set a custom title for the login URL to provide additional context and information to users.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>SEO-friendly:\u003C\u002Fstrong> Customize your login logo and URL with SEO considerations in mind, improving search engine visibility and branding.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>👉 \u003Cstrong>Customizing Logo Style\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You can customize the style of the login logo using the following options:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Logo Height:\u003C\u002Fstrong> Set the height of the logo image by entering a value (e.g., “100px”) in the Logo Height field. This determines the vertical size of the logo.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Logo Width:\u003C\u002Fstrong> Set the width of the logo image by entering a value (e.g., “100%”) in the Logo Width field. This controls the horizontal size of the logo.  \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Logo Border Radius:\u003C\u002Fstrong> Define the border radius of the logo image by entering a value (e.g., “10”) in the Logo Border Radius field. This adds rounded corners to the logo.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>👉 \u003Cstrong>Create a Memorable and Branded Login Experience:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Enhance your WordPress login page with the \u003Cstrong>“Custom Login Logo and URL”\u003C\u002Fstrong> plugin. Give your users a personalized and branded login experience while reinforcing your brand identity and improving security. Download the plugin today and take control of your login page.\u003C\u002Fp>\n\u003Cp>Adjust these values to achieve the desired style for your login logo.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Support and Compatibility:\u003C\u002Fstrong> 👇\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Custom Login Logo and URL\u003C\u002Fstrong> is regularly updated and compatible with the latest versions of WordPress. Our dedicated support team is ready to assist you with any questions or issues you may encounter. Feel free to reach out to us at \u003Ca href=\"https:\u002F\u002Fhelp.wpplugines.com\u002F\" rel=\"nofollow ugc\">help.wpplugines.com\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>For more exciting plugins visit 👉 \u003Ca href=\"https:\u002F\u002Fwpplugines.com\u002F\" rel=\"nofollow ugc\">wpplugines.com\u003C\u002Fa>\u003C\u002Fp>\n","Effortlessly customize your WordPress login page with a custom logo and branded URL to enhance user experience and security.",1165,"2024-11-17T06:25:00.000Z","6.7.5",[140,141,142,143,105],"branded-login","custom-login-page","custom-login-url","login-logo-customization","https:\u002F\u002Fwpplugines.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-login-logo-and-url.1.0.zip",92,{"slug":148,"name":149,"version":150,"author":151,"author_profile":152,"description":153,"short_description":154,"active_installs":155,"downloaded":156,"rating":13,"num_ratings":157,"last_updated":158,"tested_up_to":159,"requires_at_least":160,"requires_php":85,"tags":161,"homepage":165,"download_link":166,"security_score":167,"vuln_count":168,"unpatched_count":29,"last_vuln_date":169,"fetched_at":31},"loginpress","LoginPress | wp-login Custom Login Page Customizer","6.1.2","Adnan","https:\u002F\u002Fprofiles.wordpress.org\u002Fhiddenpearls\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fpricing?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=text-links\" rel=\"friend nofollow ugc\">LoginPress Plugin\u003C\u002Fa> by LoginPress holds a lot of customization fields to change the layout of the login page of WordPress. You can modify the look and feel of login page completely even the login error messages, forgot error messages, registration error messages, forget password hint message and many more.\u003Cbr \u002F>\nLoginPress Plugin would give you and your users a feeling that it is a custom login page and a part of the site layout. You must checkout the Demo video of how you can customize WordPress login page.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Getting Started video for customizing login page using LoginPress\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FGMAwsHomJlE?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fpricing?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=text-links\" rel=\"nofollow ugc\">Why You Should Upgrade to LoginPress Pro?\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\n    \u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F9snT9rWxO4g?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fpricing?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=text-links\" rel=\"nofollow ugc\">Checkout the Pro version\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>LoginPress plugin is built using The Customizer API which is getting popular for live-previewing any changes to the layouts of WordPress. So, with LoginPress you can preview your login page changes instantly. This login customizer plugin is easy enough & required no coding skills. Just have options for each element on the login form and make a new customized login page within seconds.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fdocumentation\u002F?utm_source=wp-org&utm_medium=description&utm_campaign=user-guide&utm_content=Documentation+link\" rel=\"nofollow ugc\">LoginPress Documentation\u003C\u002Fa>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>Multilingual & Translatable\u003Cbr \u002F>\n  WPML Compatible\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Cstrong>LoginPress Addons:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>We have a collection of great Free and Pro addons that makes LoginPress more powerful. Upgrade to Pro package and enjoy the show.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fadd-ons\u002Flogin-logout-menu\u002F?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=login-logout-menu\" rel=\"nofollow ugc\">Login Logout Menu (FREE)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fadd-ons\u002Fsocial-login\u002F?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=social-login\" rel=\"nofollow ugc\">Social Login\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fadd-ons\u002Flogin-widget\u002F?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=login-widget\" rel=\"nofollow ugc\">Login Widget\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fadd-ons\u002Flogin-redirects\u002F?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=login-redirect\" rel=\"nofollow ugc\">Login Redirects\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fadd-ons\u002Flimit-login-attempts\u002F?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=limit-login-attempts\" rel=\"nofollow ugc\">Limit Login Attempts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fadd-ons\u002Fhide-login\u002F?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=hide-login\" rel=\"nofollow ugc\">Hide Login\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fadd-ons\u002Fauto-login\u002F?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=auto-login\" rel=\"nofollow ugc\">Auto Login\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>LoginPress Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>Logo: Can change the login logo {image, width, height, padding, URL and Title}.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Background: You can customize background Image or Color. Set its position, Size and repeatable property.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Login Form: Even you can customize the login form {image or color, width, height, padding and border}. More over customize Input Text Field {width, margin, text color, label color and background color}.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Forget Form: Beauty of the plugin here you can change the background or color of the forget form.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Button: You can set the color of your button WYSIWYG.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Error Messages: Main Feature of the plugin. You can change the error log messages as you want to show users form LoginPress \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Error Messages.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Welcome Messages: Same as error log messages you can customize the welcome messages from LoginPress \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Welcome Messages.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Form Footer: After the login Button, here is form footer. You can customize the footer {text, display, text decoration, text color, text hover color and text size}. In this section you can also customize the page footer text.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Making WordPress Login page mobile friendly after customization\u003C\u002Fstrong>\u003Cbr \u002F>\n  This plugin is also responsive. It means that when you customize login page, It will look good on mobile i.e It is Responsive.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Cstrong>LoginPress Features in Detail:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Customize login error messages. You can change every error message whether it is on login form, forgot password form, register form or reset password form.\u003C\u002Fli>\n\u003Cli>Customize login logo image.\u003C\u002Fli>\n\u003Cli>Customize login logo image width.\u003C\u002Fli>\n\u003Cli>Customize login logo image height.\u003C\u002Fli>\n\u003Cli>Customize login logo image hover title.\u003C\u002Fli>\n\u003Cli>Customize login logo image hover link.\u003C\u002Fli>\n\u003Cli>Customize login logo padding bottom.\u003C\u002Fli>\n\u003Cli>Customize login page background image.\u003C\u002Fli>\n\u003Cli>Customize login page background color.\u003C\u002Fli>\n\u003Cli>Background Gallery with a selected set of HD Backgrounds for Login Screen.\u003C\u002Fli>\n\u003Cli>Customize login page background image size.\u003C\u002Fli>\n\u003Cli>Customize login page without background image. You can keep it simple with different login form style.\u003C\u002Fli>\n\u003Cli>Customize login form width.\u003C\u002Fli>\n\u003Cli>Customize login form height.\u003C\u002Fli>\n\u003Cli>Customize login form border style.\u003C\u002Fli>\n\u003Cli>Customize login form input styling.\u003C\u002Fli>\n\u003Cli>Customize login form label styling.\u003C\u002Fli>\n\u003Cli>Customize login form field text color.\u003C\u002Fli>\n\u003Cli>Customize login form background color.\u003C\u002Fli>\n\u003Cli>Customize login page “lost your password?” text.\u003C\u002Fli>\n\u003Cli>Customize login forgot password form background color and image.\u003C\u002Fli>\n\u003Cli>Customize login form button styling.\u003C\u002Fli>\n\u003Cli>Customize login form notice messages.\u003C\u002Fli>\n\u003Cli>Add copyright notice message at the bottom of login page.\u003C\u002Fli>\n\u003Cli>Customize “Back to” text at login page. You can hide or show or change the color or even the text size as well.\u003C\u002Fli>\n\u003Cli>Customize login page footer. We call login page footer area under the login form fields.\u003C\u002Fli>\n\u003Cli>LoginPress has a Custom CSS area which can Customize login page in more advanced way. Recommended for advanced users.\u003C\u002Fli>\n\u003Cli>Customize your login page in more advanced way using our Custom JS area. Add your JS there and make your login page more advanced.\u003C\u002Fli>\n\u003Cli>Customize login page with unlimited features available in LoginPress.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>After going through this extensive list of features you can imagine Why LoginPress is the best login page customizer in the WordPress market.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Beautify and Innovate your WordPress login page without any coding knowledge!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch3>Languages compatible\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Arabic\u003C\u002Fli>\n\u003Cli>Chinese (Traditional)\u003C\u002Fli>\n\u003Cli>Dutch\u003C\u002Fli>\n\u003Cli>Spanish\u003C\u002Fli>\n\u003Cli>French Translated by \u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fjean.scheider\" rel=\"friend nofollow ugc\">Jean Scheider\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Dutch (Netherlands) Translated by \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fharm10\u002F\" rel=\"friend nofollow ugc\">Harm10\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Russian Translated by \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fsatone667\" rel=\"friend nofollow ugc\">satone667\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Portuguese (Brazil) Translated by \u003Ca href=\"https:\u002F\u002Fen.gravatar.com\u002Frmcbrothers\" rel=\"friend nofollow ugc\">Rodrigo\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Polish (Poland) Translated by \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fxszejdi\u002F\" rel=\"friend nofollow ugc\">Mateusz\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>What’s Next\u003C\u002Fh4>\n\u003Cp>If you like this plugin, then consider checking out our other amazing plugins:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fanalytify.io\u002Fref\u002F73\u002F?utm_source=loginpress&utm_medium=readme&utm_campaign=pro-upgrade\" title=\"Google Analytics by Analytify\" rel=\"friend nofollow ugc\">Analytify – Google Analytics WordPress Plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Frelated-posts-thumbnails\u002F\" title=\"Related Posts\" rel=\"friend ugc\">WordPress Related Posts\u003C\u002Fa> – Best Related Posts Plugin\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsimplesocialbuttons.com?utm_source=loginpress&utm_medium=readme&utm_campaign=pro-upgrade\" title=\"Simple Social Buttons\" rel=\"friend nofollow ugc\">Simple Social Buttons\u003C\u002Fa> – Simple Social Sharing WordPress Plugin\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwpbrigade.com\u002Frecommend\u002Fmaintenance-mode?utm_source=loginpress&utm_medium=readme&utm_campaign=pro-upgrade\" rel=\"nofollow ugc\">Under Construction, Coming Soon & Maintenance Mode\u003C\u002Fa> – Plugin for Under construction & Coming soon page\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-headers-and-footers\u002F\" rel=\"ugc\">Insert Scripts in Headers and Footers\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Notes\u003C\u002Fh3>\n\u003Cp>LoginPress is absolutely, positively the most \u003Ca href=\"https:\u002F\u002Floginpress.pro\u002Fpricing?utm_source=wp-org&utm_medium=description&utm_campaign=pro-upgrade&utm_content=text-links\" title=\"Best Custom login form plugin\" rel=\"friend nofollow ugc\">beginner friendly WordPress custom login form plugin\u003C\u002Fa> on the market. It is both easy and powerful.\u003C\u002Fp>\n\u003Cp>Also, I’m the founder of \u003Ca href=\"https:\u002F\u002FWPBrigade.com\u002F?utm_source=loginpress-lite\" rel=\"friend nofollow ugc\">WPBrigade\u003C\u002Fa>, We do custom WordPress themes for clients and can transform any website in WordPress. It was a huge priority for me to make a WordPress custom login form plugin that beginners can use without any training.\u003C\u002Fp>\n\u003Cp>I feel that we have done that here. I hope you enjoy using LoginPress.\u003C\u002Fp>\n\u003Cp>Thank you\u003C\u002Fp>\n\u003Cp>Muhammad Adnan\u003C\u002Fp>\n","LoginPress is a Custom Login Page Customizer plugin allows you to easily customize the layout of login, admin login, client login, register pages.",200000,7238986,1063,"2026-02-11T20:15:00.000Z","6.9.4","4.0",[20,162,163,24,164],"login","login-customizer","wp-login","https:\u002F\u002Floginpress.pro?utm_source=loginpress-lite&utm_medium=plugin-header&utm_campaign=pro-upgrade&utm_content=plugin-uri","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Floginpress.6.1.2.zip",94,6,"2025-03-13 00:00:00",{"attackSurface":171,"codeSignals":241,"taintFlows":341,"riskAssessment":342,"analyzedAt":356},{"hooks":172,"ajaxHandlers":237,"restRoutes":238,"shortcodes":239,"cronEvents":240,"entryPointCount":29,"unprotectedCount":29},[173,180,184,188,193,197,201,205,208,212,216,220,225,229,233],{"type":174,"name":175,"callback":176,"priority":177,"file":178,"line":179},"action","init","load_options",5,"class.yith-login-admin.php",55,{"type":174,"name":175,"callback":181,"priority":182,"file":178,"line":183},"init_panel",15,56,{"type":174,"name":175,"callback":185,"priority":186,"file":178,"line":187},"default_options",10,57,{"type":174,"name":189,"callback":190,"priority":182,"file":191,"line":192},"login_enqueue_scripts","login_enqueue","class.yith-login-frontend.php",39,{"type":174,"name":194,"callback":195,"file":191,"line":196},"login_headerurl","change_logo_url",40,{"type":174,"name":198,"callback":199,"file":191,"line":200},"login_headertext","change_logo_title",41,{"type":174,"name":202,"callback":203,"priority":182,"file":191,"line":204},"login_head","add_login_style",42,{"type":174,"name":202,"callback":206,"priority":182,"file":191,"line":207},"add_login_script",43,{"type":174,"name":209,"callback":210,"file":191,"line":211},"login_form","add_mascotte",44,{"type":174,"name":175,"callback":213,"file":214,"line":215},"load_plugin_textdomain","class.yith-login.php",45,{"type":174,"name":217,"callback":218,"file":219,"line":215},"yith_panel_before_panel","yith_show_gfont_gdpr_disclaimer","functions.yith-login.php",{"type":174,"name":221,"callback":222,"file":223,"line":224},"admin_menu","add_submenu_page","yit-common\\yith-panel.php",109,{"type":174,"name":226,"callback":227,"file":223,"line":228},"admin_init","panel_register_setting",110,{"type":174,"name":230,"callback":231,"file":223,"line":232},"admin_enqueue_scripts","panel_enqueue",111,{"type":174,"name":234,"callback":235,"file":223,"line":236},"yith_panel_after_panel","js_typo_vars",114,[],[],[],[],{"dangerousFunctions":242,"sqlUsage":243,"outputEscaping":245,"fileOperations":48,"externalRequests":29,"nonceChecks":29,"capabilityChecks":29,"bundledLibraries":340},[],{"prepared":48,"raw":29,"locations":244},[],{"escaped":168,"rawEcho":246,"locations":247},54,[248,251,253,254,255,256,257,259,261,263,265,266,268,270,271,273,275,277,279,281,282,284,286,288,290,292,294,296,298,301,303,305,307,309,311,313,314,315,316,317,319,320,322,323,325,326,328,329,331,332,333,334,336,338],{"file":191,"line":249,"context":250},112,"raw output",{"file":191,"line":252,"context":250},117,{"file":191,"line":252,"context":250},{"file":191,"line":252,"context":250},{"file":191,"line":252,"context":250},{"file":191,"line":252,"context":250},{"file":191,"line":258,"context":250},124,{"file":191,"line":260,"context":250},131,{"file":191,"line":262,"context":250},132,{"file":191,"line":264,"context":250},133,{"file":191,"line":264,"context":250},{"file":191,"line":267,"context":250},135,{"file":191,"line":269,"context":250},151,{"file":191,"line":269,"context":250},{"file":191,"line":272,"context":250},152,{"file":191,"line":274,"context":250},156,{"file":191,"line":276,"context":250},157,{"file":191,"line":278,"context":250},161,{"file":191,"line":280,"context":250},165,{"file":191,"line":280,"context":250},{"file":191,"line":283,"context":250},166,{"file":191,"line":285,"context":250},170,{"file":191,"line":287,"context":250},171,{"file":191,"line":289,"context":250},172,{"file":191,"line":291,"context":250},175,{"file":191,"line":293,"context":250},220,{"file":191,"line":295,"context":250},236,{"file":191,"line":297,"context":250},237,{"file":299,"line":300,"context":250},"yit-common\\yit-functions.php",84,{"file":223,"line":302,"context":250},149,{"file":223,"line":304,"context":250},162,{"file":223,"line":306,"context":250},196,{"file":223,"line":308,"context":250},197,{"file":223,"line":310,"context":250},261,{"file":223,"line":312,"context":250},439,{"file":223,"line":312,"context":250},{"file":223,"line":312,"context":250},{"file":223,"line":312,"context":250},{"file":223,"line":312,"context":250},{"file":223,"line":318,"context":250},444,{"file":223,"line":318,"context":250},{"file":223,"line":321,"context":250},454,{"file":223,"line":321,"context":250},{"file":223,"line":324,"context":250},456,{"file":223,"line":324,"context":250},{"file":223,"line":327,"context":250},465,{"file":223,"line":327,"context":250},{"file":223,"line":330,"context":250},475,{"file":223,"line":330,"context":250},{"file":223,"line":330,"context":250},{"file":223,"line":330,"context":250},{"file":223,"line":335,"context":250},495,{"file":223,"line":337,"context":250},508,{"file":223,"line":339,"context":250},509,[],[],{"summary":343,"deductions":344},"The static analysis of yith-custom-login v1.7.7 reveals a generally positive security posture in terms of its attack surface and direct code execution risks. There are no identified AJAX handlers, REST API routes, shortcodes, or cron events, resulting in zero total entry points and zero unprotected ones.  Furthermore, the plugin avoids dangerous functions, performs all SQL queries using prepared statements, and has no external HTTP requests. This suggests a careful approach to direct code interaction points.\n\nHowever, concerns arise from the output escaping and file operation signals. With only 10% of outputs properly escaped among 60 total outputs, there's a significant risk of Cross-Site Scripting (XSS) vulnerabilities, especially given the plugin's past vulnerability history which includes two medium-severity XSS issues. The presence of file operations without further context also warrants caution.  The complete absence of nonce and capability checks on entry points (though there are none identified) is a missed opportunity for robustness, and the zero taint analysis flows, while seemingly good, could also indicate that the analysis itself had limitations or that the plugin's structure doesn't lend itself to traditional taint flow detection.\n\nDespite the low number of identified entry points, the vulnerability history, particularly the prevalence of XSS, coupled with the poor output escaping rates, indicates a recurring weakness. The recent medium vulnerability in September 2024, related to XSS, reinforces this. The plugin's strengths lie in its limited attack surface and secure database interactions. The weaknesses are primarily in output sanitization and the potential for unintended file interactions, which, when combined with past XSS issues, present a tangible risk to users.",[345,348,350,352,354],{"reason":346,"points":347},"Poor output escaping (10% escaped)",20,{"reason":349,"points":347},"Past medium XSS vulnerabilities",{"reason":351,"points":186},"No nonce checks",{"reason":353,"points":186},"No capability checks",{"reason":355,"points":177},"File operations detected","2026-03-16T18:04:46.341Z",{"wat":358,"direct":366},{"assetPaths":359,"generatorPatterns":361,"scriptPaths":362,"versionParams":363},[360],"\u002Fwp-content\u002Fplugins\u002Fyith-custom-login\u002Fassets\u002Fimages\u002Fmascotte.png",[],[],[364,365],"yith-custom-login\u002Fassets\u002Fimages\u002Fmascotte.png?ver=","yith-custom-login\u002Fassets\u002Fcss\u002Flogin-style.css?ver=",{"cssClasses":367,"htmlComments":369,"htmlAttributes":370,"restEndpoints":394,"jsGlobals":395,"shortcodeOutput":396},[368],"mascotte",[],[371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393],"yith_login_mascotte","yith_login_mascotte_url","yith_login_background_color","yith_login_background_image","yith_login_background_repeat","yith_login_background_position","yith_login_background_attachment","yith_login_logo_image","yith_login_logo_color","yith_login_logo_width","yith_login_logo_height","yith_login_container_width","yith_login_typo_input","yith_login_typo_text","yith_login_typo_submit","yith_login_custom_style","yith_login_color_input","yith_login_border_input","yith_login_color_input_focus","yith_login_border_input_focus","yith_login_typo_submit_hover","yith_login_submit_color_hover","yith_login_submit_border_color_hover",[],[],[]]