Skip to content
Threat Feed
Subscribe

Product

LoginPress Pro Plugin <= 6.2.3

1 brief RSS
high advisory

CVE-2026-12598: LoginPress Pro WordPress Plugin Authentication Bypass

An authentication bypass vulnerability (CVE-2026-12598) exists in the LoginPress Pro plugin for WordPress, affecting versions up to and including 6.2.3 within the Spotify Social Login addon, enabling unauthenticated attackers to log in as any existing WordPress user, including administrators, by registering a Spotify account with the target's email.

LoginPress Pro plugin <= 6.2.3 +1 wordpress plugin authentication-bypass web
2t 1c