When Last Login

When Last Login has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for When Last Login has a vendor fix available, so running the current release closes it.

All of these findings were reported by Muhammad Daffa. When Last Login is installed on roughly 50,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all When Last Login vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2023-27461

When Last Login <= 1.2.1 - Cross-Site Request Forgery via wll_hide_subscription_notice

Read the full analysis

Vulnerability Records

1 records


2023-03-01 00:00	When Last Login <= 1.2.1 - Cross-Site Request Forgery via wll_hide_subscription_notice When Last Login <= 1.2.1	`CVE-2023-27461`	4.3 Medium	Muhammad Daffa	Yes

Showing 1–1 of 1 reports

Latestv1.2.3

When Last Login

Author

Andrew Lima

4.7(37)

94/100

Last Updated

2026-08-13 (1mo ago)

Active Installs

50,000+

Downloads

198,689

Requires WP

5.0+

Requires PHP

7.4+

Tested up to

WP 7.0.4

Created

2016-07-15 (10y ago)

A lightweight plugin that allows you to see active users according to their last login time/date. No need to configure, simply activate When Last and you’re ready to go! This adds a custom column to your WordPress users list of “Last Login” and a timestamp linked to that user. Features Show when last a user has logged into your site. Sorts users according to last login time stamp (Ascending/Descending) in the WordPress user list. Administrator widget for top 3 users according to login count. Integrates with Paid Memberships Pro 1.8+ – Add’s a ‘Last Logged In’ column to the ‘Members List’. Generates a login history table under ‘When Last Login’ > ‘All Login Records’. Hooks and filters for developers. Record the user’s last IP address when logging into your WordPress website (Optional Setting). A variety of Premium and Free add-ons available. Free Add-ons When Last Login – Welcome Email When Last Login – Export User Records Premium Add-ons When Last Login – Slack Notifications When Last Login – User Statistics When Last Login – Zapier Integration When Last Login in your Language We need your help to translate When Last Login into your locale. To translate When Last Login, simply visit https://translate.wordpress.org/projects/wp-plugins/when-last-login Track Your Members Better You are able to track which members login to your site by simply sorting your default user’s list according to when last the user was seen in easily readable text such as “X Min/Hours/Days/Weeks/Months/Years”. Plugins that When Last Login integrates with Here is a list of plugins we currently support: Paid Memberships Pro Two Factor Authentication If you have a plugin and would like to integrate with When Last Login, please open a support thread. Need Help Something not working as intended or have a question about functionality of When Last Login. Open a support thread

View on WordPress.org