LoginPress Pro

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   LoginPress Pro

Information

Software Type Plugin
Software Slug loginpress-pro
Software Status Active
Software Author LoginPress
Software Website loginpress.pro
Software Active Installs 28,800
Software Record Last Updated June 18, 2026

7 Vulnerabilities

Submit a Vulnerability
LoginPress Pro <= 6.2.3 - Unauthenticated Authentication Bypass via Unverified OAuth Email via GitHub OAuth Callback
8.1
CVE-2026-12597
Jul 9, 2026
Researcher: Nguyen Ngoc Duc (duc193)
LoginPress Pro <= 6.2.3 - Unauthenticated Authentication Bypass via Unverified OAuth Email via Discord OAuth Callback
8.1
CVE-2026-12595
Jul 9, 2026
Researcher: Nguyen Ngoc Duc (duc193)
LoginPress Pro <= 6.2.3 - Unauthenticated Authentication Bypass via Unverified OAuth Email in Spotify OAuth Callback
8.1
CVE-2026-12598
Jul 9, 2026
Researcher: Nguyen Ngoc Duc (duc193)
LoginPress Pro <= 6.2.2 - Unauthenticated Privilege Escalation
9.8
CVE-2026-49058
Jun 8, 2026
Researcher: wackydawg
LoginPress Pro <= 5.0.1 - Authentication Bypass via WordPress.com OAuth provider
9.8
CVE-2025-7444
Jul 17, 2025
Researcher: Foxyyy
LoginPress Pro < 3.0 - Captcha Bypass
5.3
CVE-2024-32676
Apr 17, 2024
Researcher: Dave Jong
LoginPress Pro < 3.0 - Missing Authorization to License Status Update
5.3
CVE-2024-32677
Apr 17, 2024
Researcher: Dave Jong
Title Status CVE ID CVSS Researchers Date
LoginPress Pro <= 6.2.3 - Unauthenticated Authentication Bypass via Unverified OAuth Email via GitHub OAuth Callback Patched CVE-2026-12597 8.1 Nguyen Ngoc Duc (duc193) July 9, 2026
LoginPress Pro <= 6.2.3 - Unauthenticated Authentication Bypass via Unverified OAuth Email via Discord OAuth Callback Patched CVE-2026-12595 8.1 Nguyen Ngoc Duc (duc193) July 9, 2026
LoginPress Pro <= 6.2.3 - Unauthenticated Authentication Bypass via Unverified OAuth Email in Spotify OAuth Callback Patched CVE-2026-12598 8.1 Nguyen Ngoc Duc (duc193) July 9, 2026
LoginPress Pro <= 6.2.2 - Unauthenticated Privilege Escalation Patched CVE-2026-49058 9.8 wackydawg June 8, 2026
LoginPress Pro <= 5.0.1 - Authentication Bypass via WordPress.com OAuth provider Patched CVE-2025-7444 9.8 Foxyyy July 17, 2025
LoginPress Pro < 3.0 - Captcha Bypass Patched CVE-2024-32676 5.3 Dave Jong April 17, 2024
LoginPress Pro < 3.0 - Missing Authorization to License Status Update Patched CVE-2024-32677 5.3 Dave Jong April 17, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation