WordPress plugin
LoginWP (Formerly Peter's Login Redirect) security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium2
- Low0
All LoginWP (Formerly Peter's Login Redirect) vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Multiple Cross-Site Request Forgery vulnerabilities ≤2.9.1Update to 2.9.2 | CVE-2019-15115 |
- High8.8Multiple Cross-Site Request Forgery vulnerabilities
≤2.9.1Update to 2.9.2
LoginWP (Formerly Peter's Login Redirect): common questions
Does LoginWP (Formerly Peter's Login Redirect) have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in LoginWP (Formerly Peter's Login Redirect): 1 high, 2 medium. None are known to affect version null.
How do I check which version of LoginWP (Formerly Peter's Login Redirect) I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent LoginWP (Formerly Peter's Login Redirect) vulnerability?
CVE-2021-24939, published Nov 8, 2021: LoginWP < 3.0.0.5 - Reflected Cross-Site Scripting via rul_login_url, rul_logout_url Parameter. Severity: Medium (CVSS 6.1).
Is any LoginWP (Formerly Peter's Login Redirect) vulnerability listed in CISA KEV?
No. None of the known LoginWP (Formerly Peter's Login Redirect) vulnerabilities is currently listed in the CISA KEV catalog.