Extension WordPress
Vulnérabilités LoginPress Pro
Cette page rassemble les failles publiées pour LoginPress Pro, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de LoginPress Pro
7 fiches
LoginPress Pro <= 6.2.3 – Unauthenticated Authentication Bypass via Unverified OAuth Email via GitHub OAuth Callback
The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via the GitHub OAuth callback in versions up to, and including, 6.2.3. The vulnerability exists in the loginpress_on_github_login() function, which blindly trusts the first element (profile[0]['email']) of…
*-6.2.3
6.2.4
09/07/2026
LoginPress Pro <= 6.2.3 – Unauthenticated Authentication Bypass via Unverified OAuth Email via Discord OAuth Callback
The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via Unverified OAuth Email in all versions up to and including 6.2.3. The vulnerability exists in the loginpress_on_discord_login() Discord OAuth callback handler, which accepts the email field…
*-6.2.3
6.2.4
09/07/2026
LoginPress Pro <= 6.2.3 – Unauthenticated Authentication Bypass via Unverified OAuth Email in Spotify OAuth Callback
The LoginPress Pro plugin for WordPress is vulnerable to authentication bypass in versions up to and including 6.2.3 via the Spotify Social Login addon. This is due to the loginpress_on_spotify_login() function trusting the unverified 'email' field returned by…
*-6.2.3
6.2.4
09/07/2026
LoginPress Pro <= 6.2.2 – Unauthenticated Privilege Escalation
The LoginPress Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.2.2. This makes it possible for unauthenticated attackers to elevate their privileges.
*-6.2.2
6.2.3
08/06/2026
LoginPress Pro <= 5.0.1 – Authentication Bypass via WordPress.com OAuth provider
The LoginPress Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.0.1. This is due to insufficient verification on the user being returned by the social login token. This makes it…
*-5.0.1
5.0.2
17/07/2025
LoginPress Pro < 3.0 – Captcha Bypass
The LoginPress Pro plugin for WordPress is vulnerable to Captcha Bypass in versions up to, but not including, 3.0. This makes it possible for unauthenticated attackers to bypass the Captcha Verification.
[*, 3.0)
3.0
17/04/2024
LoginPress Pro < 3.0 – Missing Authorization to License Status Update
The LoginPress Pro plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in all versions up to, but not including, 3.0. This makes it possible for unauthenticated attacks to activate and…
[*, 3.0)
3.0
17/04/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.