Login & Register Customizer – Forms, Popup, Profile & WooCommerce
Login & Register Customizer – Forms, Popup, Profile & WooCommerce has 12 disclosed vulnerabilities in the WordSec catalog, reported between 2020 and 2026; all 12 are fixed as of October 2026. Their average CVSS score is 6.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 5 high. 2026 was the busiest year with 4 disclosures.
The most common weakness is Cross-Site Scripting, behind 3 of the records (25%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF).
Every one of the 12 issues recorded for Login & Register Customizer – Forms, Popup, Profile & WooCommerce has a vendor fix available, so running the current release closes all known holes.
9 independent researchers contributed these findings, most of them (2) reported by 1337_Wannabe. Login & Register Customizer – Forms, Popup, Profile & WooCommerce is installed on roughly 30,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2026-18468Login & Register Forms <= 4.0.1 - Unauthenticated Privilege Escalation via Account Takeover
Read the full analysisVulnerability Records
Login & Register Customizer – Forms, Popup, Profile & WooCommerce
Author
xootix
🚀 Live Demo Give your WordPress or WooCommerce website a modern login experience with beautiful, fast, and fully customizable forms. ✔ Login ✔ Registration ✔ Lost Password ✔ Reset Password ✔ User Profile Choose how your forms appear: ⭐ Popup ⭐ Slider ⭐ Inline No more redirecting users to the default WordPress login page. Keep visitors on your website with a smooth, AJAX-powered experience that helps increase registrations and conversions. Perfect for WooCommerce stores, membership websites, online communities, LMS platforms, and business websites. ❤️ Why You’ll Love It AJAX-powered forms (no page reloads) Different layouts Custom Field Manager Flexible shortcodes Beautiful & fully customizable design WPML compatible Lightweight, fast & developer friendly Power Up with Add-ons 🌐 Social Login Allow users to log in or register instantly using their favorite social accounts. Supported providers Google Facebook Apple X (Twitter) LINE Perfect for increasing registrations and reducing signup abandonment. 🔐 OTP Login & Two-Factor Authentication (2FA) Offer secure, passwordless authentication using one-time verification codes. Features Passwordless login via Email, SMS or WhatsApp OTP Two-Factor Authentication (2FA) Authenticator app support Verify phone numbers during registration Verify phone numbers during WooCommerce checkout Reduce fake accounts and fraudulent orders ✉️ Email Verification & User Approval Protect your website from fake registrations. Verification methods Verification Code One-Click Verification Link Manual User Approval 📝 Custom Registration Fields Create registration forms tailored to your business. Features Unlimited custom fields Text, Textarea, Select, Radio, Checkbox, File Upload and more Display fields on User Profile Display fields on WooCommerce My Account Reuse WooCommerce billing & shipping fields 🛡️ Security Protect your forms against spam, bots and brute-force attacks. Includes Google reCAPTCHA v2 & v3 Cloudflare Turnstile Friendly Captcha (GDPR-friendly) Password Strength Meter Login Attempt Limiter 📍 Address Autocomplete Automatically fill billing and shipping addresses using Google Places Autocomplete for faster checkout and more accurate customer information. ❤️ Built for Performance Built with performance in mind, the plugin is lightweight, responsive and developer-friendly. It integrates seamlessly with both WordPress and WooCommerce while maintaining fast page loads and a smooth user experience.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C