Read More Login
Read More Login has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Read More Login has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nguyen Ngoc Quang Bach (maysbachs). Read More Login is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.8.15.
CVE-2025-28989Read More Login <= 2.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Read More Login
Author
arildur
This plugin puts a combined read more/login/registration form in your posts and pages. The visitors must log in or sign up to read more. Remaining text will be protected and hidden from non-logged in users. Visitors can sign up and log in from inside articles and don’t need to leave the page. Text fades out above the login form and will indicate more text can be read. This could increase conversion rate. Live demo: readmorelogin.com/live-demo Main features Creates login/register form inside articles on posts and pages Visitors can log in from inside the articles, remaining text loads automatically Text will fade close to login form, this indicate more text be to read Easy access to register button to sign-up new visitors The e-mail confirmation link sends the signed up user right back to the article Works with both pages and posts SEO friendly, Google search engines can read without login Membership handling Login/registration forms inside articles Registration page Login/logout page Profile page Password recovery page E-mail confirmation E-mail notifications for registered users and admin Admin panels Configurable forms and text messages Configurable linking Login/logout/register/password page redirect E-mail customization Registration status Sign-up statistics More info, live-demo, user guides, documentation, support: readmorelogin.com
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C