PLUGIN SECURITY
Is Login Customizer safe?
Custom Login Customizer allows you to easily customize your admin login page, straight from your WordPress Customizer!
What this plugin does
- Slug:
login-customizer - Author: Adnan
- 90000+ active installs
- 96/100 rating (410 reviews on wordpress.org)
- 2029602 all-time downloads
- On WordPress.org since 2014-12-11
custom logincustomizerloginlogin pagewp login
Maintenance status
- Latest known version: 2.5.4
- Last updated: 2026-01-06 2:24pm GMT
- Tested up to WordPress: 6.9.7
- Requires PHP: 5.6+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
2 known CVEs on file for Login Customizer. Reported between 2022 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-14975 | Custom Login Page Customizer [login-customizer] < 2.5.4 | Improper Privilege Management | High 8.1 | < 2.5.4 | 2.5.4 | 2026-01-08 | ✓ fixed in latest |
| CVE-2023-33999 | Custom Login Page Customizer [login-customizer] < 2.2.3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 2.2.3 | 2.2.3 | 2023-07-18 | ✓ fixed in latest |
| — | Custom Login Page Customizer [login-customizer] < 2.1.8 | Missing Authorization | Medium 6.3 | < 2.1.8 | 2.1.8 | 2022-03-04 | ✓ fixed in latest |
| — | Custom Login Page Customizer [login-customizer] < 2.1.8 | — | Unknown | < 2.1.8 | 2.1.8 | 2022-02-28 | ✓ fixed in latest |
| — | Custom Login Page Customizer [login-customizer] < 2.1.8 | — | Unknown | < 2.1.8 | 2.1.8 | 2022-02-28 | ✓ fixed in latest |
| — | Unauthorised AJAX Calls via Freemius | — | Unknown | < 2.1.8 | 2.1.8 | — | ✓ fixed in latest |
How to fix it
Keep Login Customizer updated — 2.5.4 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- LoginPress | wp-login Custom Login Page Customizer — 200000+ active installs — 96/100 (1075) — max PHP 8.4
- Customizer Export/Import — 100000+ active installs — 96/100 (115) — max PHP 8.4
- All In One Login — Login Page Security and Customization for WordPress with Google reCAPTCHA, Social Login, Temporary Login, 2FA, and more. — 60000+ active installs — 72/100 (35) — max PHP 8.4
- Customizer Search — 40000+ active installs — 100/100 (10) — max PHP 8.4
- Custom Login Page Customizer – Login Designer — 30000+ active installs — 96/100 (150)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.