Profilepress Loginwp — known CVE vulnerabilities

Every CVE whose affected-product data names Profilepress Loginwp, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-15115 — CVSS 8.8 (high): The peters-login-redirect plugin before 2.9.2 for WordPress has CSRF.
• CVE-2016-10925 — CVSS 6.1 (medium): The peters-login-redirect plugin before 2.9.1 for WordPress has XSS during the editing of redirect URLs.
• CVE-2021-24939 — CVSS 6.1 (medium): The LoginWP (Formerly Peter's Login Redirect) WordPress plugin before 3.0.0.5 does not sanitise and escape the rul_login_url and…