CVE Database /
CVE-2022-41839
CVE · Medium
CVE-2022-41839 — LoginPress | wp-login Custom Login Page Customizer [loginpress] < 1.6.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-41839
|
LoginPress | wp-login Custom Login Page Customizer [loginpress] < 1.6.3 |
— |
Medium
5.3
|
< 1.6.3
|
1.6.3 |
2022-11-07 |
—
|
CVE-2022-41839
The LoginPress plugin through version 1.6.2 contains a broken access control flaw that permits unauthenticated users to modify opt-in and opt-out tracking settings. This vulnerability was identified by Nguyen Anh Tien working with the Patchstack Alliance. Users should upgrade to version 1.6.3 or later to remediate the issue.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings