PLUGIN SECURITY
Is Change Wp Admin Login safe?
Do you want to secure and customize the WordPress login page? Download the All in One Login plugin for login page security and customization.
What this plugin does
- Slug:
change-wp-admin-login - Author: Saad Iqbal
- 60000+ active installs
- 72/100 rating (35 reviews on wordpress.org)
- 1404976 all-time downloads
- On WordPress.org since 2019-02-27
custom loginloginlogin urlwp loginwp-admin
Maintenance status
- Latest known version: 2.4.0
- Last updated: 2026-08-18 4:02am GMT
- Tested up to WordPress: 7.0.4
- Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
3 known CVEs on file for Change Wp Admin Login. Reported between 2022 and 2025.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-58595 | All In One Login — Login Page Security and Customization for WordPress with Google reCAPTCHA, Social Login, Temporary Login, 2FA, and more. [change-wp-admin-login] < 2.0.9 | Authentication Bypass by Spoofing | Medium 5.3 | < 2.0.9 | 2.0.9 | 2025-10-09 | ✓ fixed in latest |
| CVE-2023-3604 | All In One Login — Login Page Security and Customization for WordPress with Google reCAPTCHA, Social Login, Temporary Login, 2FA, and more. [change-wp-admin-login] < 1.1.4 | Observable Discrepancy | High 7.5 | < 1.1.4 | 1.1.4 | 2023-07-27 | ✓ fixed in latest |
| CVE-2022-1589 | All In One Login — Login Page Security and Customization for WordPress with Google reCAPTCHA, Social Login, Temporary Login, 2FA, and more. [change-wp-admin-login] < 1.1.0 | Cross-Site Request Forgery (CSRF) | High 7.5 | < 1.1.0 | 1.1.0 | 2022-05-09 | ✓ fixed in latest |
How to fix it
Keep Change Wp Admin Login updated — 2.4.0 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- WPS Hide Login — 2000000+ active installs — 96/100 (2111) — max PHP 8.4
- Loginizer — 1000000+ active installs — 96/100 (1030) — max PHP <8.0
- Security Optimizer – The All-In-One Protection Plugin — 1000000+ active installs — 90/100 (157) — max PHP <8.0
- Limit Login Attempts — 300000+ active installs — 92/100 (202) — max PHP 8.4
- LoginPress | wp-login Custom Login Page Customizer — 200000+ active installs — 96/100 (1075) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.