CLP – Custom Login Page by NiteoThemes

CLP – Custom Login Page by NiteoThemes has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for CLP – Custom Login Page by NiteoThemes has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Skalucy. CLP – Custom Login Page by NiteoThemes is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.9.16.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all CLP – Custom Login Page by NiteoThemes vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-31769

CLP – Custom Login Page by NiteoThemes <= 1.5.5 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
CLP – Custom Login Page by NiteoThemes banner
Latestv1.5.5

CLP – Custom Login Page by NiteoThemes

NiteoThemes

Author

NiteoThemes

5.0(4)
100/100
Last Updated
2022-03-19 (5y ago)
Active Installs
700+
Downloads
11,678
Requires WP
3.0+
Requires PHP
5.6+
Tested up to
WP 5.9.16
Created
2020-09-09 (6y ago)

Custom Login Page plugin allows you to customize any essential element on WordPress login page. It utilizes powerful customizer to implement changes in real-time. Change of a logo, graphic background, typography or just a simple tweak cannot get easier than this. Features Carefully crafted predefined templates to choose from: minimalist, flat, light, dark and more. Customizable layout – from full width, 50-50 to 2/3 layout. Logo customization: disable logo, custom text with chosen typography or a graphic logo. Background: color, gradient, pattern, image or YouTube video. Custom Login Page footer to display Copyright or any content. Integrated Unsplash Gallery – choose from more than 1.5 millions free hi-res images. Form: width, height, spacing, color, blur, border radius, complete typography, borders, shadows. Form Inputs and Labels: colors, hover & focus colors, border radius, disable password icon, disable/enable “remember me” checkbox. Form Submit Button: custom text, color, hover color, size, alignment, borders. Form Footer: alignment, font size, change texts. Messages: complete customization of login, register and lost password messages including colors. Custom CSS: insert any custom CSS code for expert customization. Login Page is 100% responsive. Import / Export of the customizer setttings. Under Active Development Custom Login Page plugin is under active development and we plan to add more awesome features!

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C