WIP Custom Login
WIP Custom Login has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2023; all 2 are fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 6.5 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Missing Authorization.
Every one of the 2 issues recorded for WIP Custom Login has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. WIP Custom Login is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2023-33313WIP Custom Login <= 1.2.9 - Cross-Site Request Forgery via save_option
Read the full analysisVulnerability Records
WIP Custom Login
Author
alexvtn
WIP Custom Login allows you to customize the login section of WordPress and you can replace the admin WordPress logo, set a background image and much more. Premium features. Default Skins You can set a default plugin skin and replace the saved options. Background slideshow You can create a beautiful body background slideshow and make your admin page unique. Unlimited colors You can change the colors of each section, like the login button. Backup section You can create a backup of plugin settings ( included the slideshow) or restore the default settings. Sample data You can import the preview settings, from the backup section. You can get the premium version from the link below: https://www.themeinprogress.com/c-login-free-custom-login-wordpress-plugin/ Installation Once you have installed the plugin, you just need to activate the plugin in order to enable it. Configuration WIP Custom Login will add a new admin page, where you can customize the login page. Translators Available Languages English (Default) Italiano
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C