LoginWP (Formerly Peter's Login Redirect)
LoginWP (Formerly Peter's Login Redirect) has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2016 and 2021; all 3 are fixed as of September 2026. Their average CVSS score is 7.0, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF).
Every one of the 3 issues recorded for LoginWP (Formerly Peter's Login Redirect) has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by ZhongFu Su. LoginWP (Formerly Peter's Login Redirect) is installed on roughly 90,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2019-15115LoginWP <= 2.9.1 - Multiple Cross-Site Request Forgery vulnerabilities
Read the full analysisVulnerability Records

LoginWP (Formerly Peter's Login Redirect)
Author
Marketing Fire
LoginWP (formerly Peter’s Login Redirect) lets you define a set of redirect rules for specific users, users with specific roles, users with specific capabilities, and a blanket rule for all other users. Also, set a redirect URL for post-registration. You can use the following placeholders in your URLs so that the system will build a dynamic URL upon each login: {{username}}, {{user_slug}}, {{website_url}}. Upgrade to LoginWP PRO to redirect users to the current page they are logging in from or back to the previous (or referrer) page after login using {{current_page}} and {{previous_page}} placeholders. Learn more You can add your own code logic before and between any of the plugin’s normal redirect checks if needed. See our documentation. Some examples include: redirecting the user based on their IP address and redirecting users to a special page on the first login. Website | Documentation | Support Pro Integrations This is the lite version that works with the default WordPress login page and limited other user registration and login form plugins. Upgrade to Pro to avail the support for the following features and plugins. Redirect After First Login WooCommerce Gravity Forms WPForms LearnDash Uncanny Toolkit LifterLMS Tutor LMS ProfilePress MemberPress MemberMouse LearnPress Easy Digital Downloads Restrict Content Pro Ultimate Member WP User Manager WP User Frontend Paid Memberships Pro WishList Member Theme My Login User Registration (WPEverest) Elementor Login Form BuddyBoss Theme Login/Registration Form Divi Theme Login/Registration Form
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C