CLP – Custom Login Page by NiteoThemes
CLP – Custom Login Page by NiteoThemes has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for CLP – Custom Login Page by NiteoThemes has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Skalucy. CLP – Custom Login Page by NiteoThemes is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.9.16.
CVE-2025-31769CLP – Custom Login Page by NiteoThemes <= 1.5.5 - Cross-Site Request Forgery
Read the full analysisVulnerability Records

CLP – Custom Login Page by NiteoThemes
Author
NiteoThemes
Custom Login Page plugin allows you to customize any essential element on WordPress login page. It utilizes powerful customizer to implement changes in real-time. Change of a logo, graphic background, typography or just a simple tweak cannot get easier than this. Features Carefully crafted predefined templates to choose from: minimalist, flat, light, dark and more. Customizable layout – from full width, 50-50 to 2/3 layout. Logo customization: disable logo, custom text with chosen typography or a graphic logo. Background: color, gradient, pattern, image or YouTube video. Custom Login Page footer to display Copyright or any content. Integrated Unsplash Gallery – choose from more than 1.5 millions free hi-res images. Form: width, height, spacing, color, blur, border radius, complete typography, borders, shadows. Form Inputs and Labels: colors, hover & focus colors, border radius, disable password icon, disable/enable “remember me” checkbox. Form Submit Button: custom text, color, hover color, size, alignment, borders. Form Footer: alignment, font size, change texts. Messages: complete customization of login, register and lost password messages including colors. Custom CSS: insert any custom CSS code for expert customization. Login Page is 100% responsive. Import / Export of the customizer setttings. Under Active Development Custom Login Page plugin is under active development and we plan to add more awesome features!
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C