High 7.5
2025-03-14< 4.0.0
WordPress LoginPress Plugin <= 3.3.1 is vulnerable to Cross Site Request Forgery (CSRF)
Minimum safe version
4.0.0
Update to 4.0.0 or later to address 7 fixable vulnerabilities
WordPress LoginPress Plugin <= 3.3.1 is vulnerable to Cross Site Request Forgery (CSRF)
LoginPress <= 1.1.15 - Authenticated Blind SQL Injection
LoginPress <= 1.1.15 - Authenticated Stored Cross-SIte Scripting
CVE-2022-41839
CVE-2019-15872
CVE-2019-15871
CVE-2022-0347