WordPress plugin
Protected wp-login security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All Protected wp-login vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting ≤2.1No patch available | CVE-2025-27333 |
- Medium6.1Reflected Cross-Site Scripting
≤2.1No patch available
Protected wp-login: common questions
Does Protected wp-login have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Protected wp-login: 1 medium. At least one is not fixed in the latest version.
How do I check which version of Protected wp-login I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Protected wp-login vulnerability?
CVE-2025-27333, published Feb 21, 2025: Protected wp-login <= 2.1 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any Protected wp-login vulnerability listed in CISA KEV?
No. None of the known Protected wp-login vulnerabilities is currently listed in the CISA KEV catalog.