Read More Login

Read More Login has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Read More Login has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Nguyen Ngoc Quang Bach (maysbachs). Read More Login is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.8.15.

Strategic Overview

Avg CVSSMedium
4.4/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Read More Login vulnerabilities before they are exploited.

Most severe open issueCVSS 4.4CVE-2025-28989

Read More Login <= 2.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Read More Login banner
Latestv2.0.3

Read More Login

arildur

Author

arildur

4.4(7)
88/100
Last Updated
2021-07-31 (5y ago)
Active Installs
200+
Downloads
7,690
Requires WP
4.7+
Requires PHP
5.5+
Tested up to
WP 5.8.15
Created
2017-10-27 (9y ago)

This plugin puts a combined read more/login/registration form in your posts and pages. The visitors must log in or sign up to read more. Remaining text will be protected and hidden from non-logged in users. Visitors can sign up and log in from inside articles and don’t need to leave the page. Text fades out above the login form and will indicate more text can be read. This could increase conversion rate. Live demo: readmorelogin.com/live-demo Main features Creates login/register form inside articles on posts and pages Visitors can log in from inside the articles, remaining text loads automatically Text will fade close to login form, this indicate more text be to read Easy access to register button to sign-up new visitors The e-mail confirmation link sends the signed up user right back to the article Works with both pages and posts SEO friendly, Google search engines can read without login Membership handling Login/registration forms inside articles Registration page Login/logout page Profile page Password recovery page E-mail confirmation E-mail notifications for registered users and admin Admin panels Configurable forms and text messages Configurable linking Login/logout/register/password page redirect E-mail customization Registration status Sign-up statistics More info, live-demo, user guides, documentation, support: readmorelogin.com

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C