Auto Login After Registration
Auto Login After Registration has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Auto Login After Registration has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by 0xd4rk5id3. Auto Login After Registration is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.6.30.
CVE-2025-49946Auto Login After Registration <= 1.0.0 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
Auto Login After Registration
Author
Cynob IT Consultancy
This plugin allows users to easily add a simple user registration form and login form anywhere on their site using simple shortcode. And provide setting to ‘Auto Login After Registration’. Follow the follwing steps – Upload the folder “auto-login-after-registration” to “/wp-content/plugins/” Activate the plugin through the “Plugins” menu in WordPress Enable/ disable ‘Auto Login After Registration’ setting by going WP-admin ->Auto Login after Register For registrtion form use below shortcode [registration-form] For login form use below shortcode [login-form]
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C