Clean Login (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-18. Vendor: Unknown.

CVEs of Clean Login

• CVE-2026-90977 - CVSS 5.3 (medium), 2026-09-18: The Clean Login WordPress plugin before 1.19 does not verify its registration CAPTCHA when the stored session value is empty, allowing unauthenticated users…
• CVE-2026-90976 - CVSS 5.3 (medium), 2026-09-18: The Clean Login WordPress plugin before 1.19 does not check whether user registration is enabled before creating an account in its registration handler,…
• CVE-2022-4838 - CVSS 5.4 (medium), 2023-02-06: The Clean Login WordPress plugin before 1.13.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which…