IDer Login for WordPress
IDer Login for WordPress has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for IDer Login for WordPress has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2024.
All of these findings were reported by zaim. IDer Login for WordPress is installed on roughly 90 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.
CVE-2024-11888IDer Login for WordPress <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
IDer Login for WordPress
Author
ider
With this plugin you can provide login and registration process using the IDer Service. An additional “Login with IDer” button will appears along the regular one. How it works? 1. First of all you need to create a profile in the IDer website 2. Clicking the button a redirect to the IDer server will display a QR Code 3. To scan it you need to download the free IDer App from the App Store or Google Play depending which cell phone you own. Or just scan the QR code with any QR Code reader and you will be redirect to the download page. Provide few infos and you are ready to scan the QR code 4. After that the IDer App will prompt you for the missing data required to complete the login/registration process. Confirming the data your browser will automatically log you in and show you which info the website saved.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C