WordPress plugin
Login Manager – Design Login Page, View Login Activity, Limit Login Attempts security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All Login Manager – Design Login Page, View Login Activity, Limit Login Attempts vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting via Custom URL ≤2.0.5No patch available | CVE-2025-2613 |
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting via Custom URL
≤2.0.5No patch available
Login Manager – Design Login Page, View Login Activity, Limit Login Attempts: common questions
Does Login Manager – Design Login Page, View Login Activity, Limit Login Attempts have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Login Manager – Design Login Page, View Login Activity, Limit Login Attempts: 1 medium. At least one is not fixed in the latest version.
How do I check which version of Login Manager – Design Login Page, View Login Activity, Limit Login Attempts I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Login Manager – Design Login Page, View Login Activity, Limit Login Attempts vulnerability?
CVE-2025-2613, published Apr 17, 2025: Login Manager – Design Login Page, View Login Activity, Limit Login Attempts <= 2.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via Custom URL. Severity: Medium (CVSS 4.4).
Is any Login Manager – Design Login Page, View Login Activity, Limit Login Attempts vulnerability listed in CISA KEV?
No. None of the known Login Manager – Design Login Page, View Login Activity, Limit Login Attempts vulnerabilities is currently listed in the CISA KEV catalog.