Login Logout Menu
Login Logout Menu has one disclosed vulnerability in the WordSec catalog, all reported in 2022; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Login Logout Menu has a vendor fix available, so running the current release closes it.
All of these findings were reported by István Márton. Login Logout Menu is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2022-4625Login Logout Menu <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Read the full analysisVulnerability Records

Login Logout Menu
Author
Adnan
Login Logout Menu plugin will help you to add the dynamic login and logout menu to any menu of your WordPress website. You can also set the Login Page url, Login redirect url, and logout redirect url. The menu item will change based on the current user status (Login or Logout). You can use the following plugin shortcodes to display the Login, Logout, Register, Password reset, Username and Profile links on your website pages. login_logout_menu__login_link login_logout_menu__logout_link login_logout_menu__profile_link login_logout_menu__register_link login_logout_menu__username_link login_logout_menu__reset_pass_link login_logout_menu__login_logout_link Check out our documentation to implement the shortcodes and filters of Login Logout Menu Plugin. If you find our plugin useful, please leave a good rating/review and check out our other plugins below. Analytify – Google Analytics Plugin LoginPress – For Custom login page and login page security Simple Social Buttons – Plugin for Social share buttons and social icons Related Posts Thumbnails Plugin – For related posts/products Under Construction, Coming Soon & Maintenance Mode – Plugin for Under construction & Coming soon page
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C