Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

LoginPress Pro — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in LoginPress Pro, with AI-generated Chinese analysis, references, and POCs.

Vendor: LoginPress

CVE ID Title CVSS Severity Published
CVE-2026-12598 LoginPress Pro <= 6.2.3 - Unauthenticated Authentication Bypass via Unverified OAuth Email in Spotify OAuth Callback CWE-287 8.1 High 2026-07-09
CVE-2026-12595 LoginPress Pro <= 6.2.3 - Unauthenticated Authentication Bypass via Unverified OAuth Email via Discord OAuth Callback CWE-287 8.1 High 2026-07-09
CVE-2026-12597 LoginPress Pro <= 6.2.3 - Unauthenticated Authentication Bypass via Unverified OAuth Email via GitHub OAuth Callback CWE-287 8.1 High 2026-07-09
CVE-2026-49058 WordPress LoginPress Pro plugin <= 6.2.2 - Privilege Escalation vulnerability CWE-266 9.8 Critical 2026-06-17
CVE-2025-7444 LoginPress Pro <= 5.0.1 - Authentication Bypass via WordPress.com OAuth provider CWE-288 9.8 Critical 2025-07-18
CVE-2024-32676 WordPress LoginPress Pro plugin < 3.0.0 - Captcha Bypass vulnerability CWE-307 5.3 Medium 2024-04-25
CVE-2024-32677 WordPress LoginPress Pro plugin < 3.0.0 - Unauth. License Activation/Deactivation vulnerability CWE-862 6.5 Medium 2024-04-24

All 7 known CVE vulnerabilities affecting LoginPress Pro with full Chinese analysis, references, and POCs where available.