Custom Login Page Customizer vulnerabilities
We track 1 vulnerability in Custom Login Page Customizer products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 29, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Custom Login Page Customizer vulnerabilities
- 8.1 High severity
Custom Login Page Customizer: Improper Privilege Management
The Custom Login Page Customizer WordPress plugin before 2.5.4 does not have a proper password reset process, allowing a few unauthenticated requests to reset the password of any user by knowing their username, such as administrator ones, and therefore gain ac