Approved changes feed: RSS · Atom

cpe:2.3:a:themeinprogress:wip_custom_login:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorThemeinprogress (7623aed9-d849-5696-a443-63eb986daceb)
ProductWip Custom Login (3e51641d-ec1b-5d85-9d95-c744f8375158)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wpplugins/wip-custom-login purl2cpe 2026-06-01 10:15:43.248538

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-33313 vulnerable 2026-06-08 06:06:22.300388 WordPress WIP Custom Login Plugin <= 1.2.9 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in ThemeinProgress WIP Custom Login plugin <= 1.2.9 versions.
Published: 2023-05-28T18:25:26.288Z
Updated: 2026-04-28T16:08:25.274Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42884 vulnerable 2026-06-08 05:49:30.631056 WordPress WIP Custom Login Plugin <= 1.2.7 is vulnerable to Broken Access Control
MEDIUM (5.4)
Missing Authorization vulnerability in ThemeinProgress WIP Custom Login.This issue affects WIP Custom Login: from n/a through 1.2.7.
Published: 2024-01-17T18:17:27.087Z
Updated: 2026-04-28T16:07:50.690Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.