Login Register Forms (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-10. Vendor: Unknown.

CVEs of Login Register Forms

• CVE-2026-18468 - CVSS 8.1 (high), 2026-08-10: The Login & Register Forms WordPress plugin before 4.0.2 does not bind the password reset verification state to the account being reset or to the party that…
• CVE-2026-18470 - CVSS 7.5 (high), 2026-08-10: The Login & Register Forms WordPress plugin before 4.0.2 does not verify that a password reset request comes from the account's owner, and does not adequately…
• CVE-2026-18469 - CVSS 8.1 (high), 2026-08-10: The Login & Register Forms WordPress plugin before 4.0.2 does not enforce its password reset attempt limit against a server-derived value, keying both the…
• CVE-2026-14836 - CVSS 8.1 (high), 2026-08-01: The Login & Register Forms WordPress plugin before 3.2.5 does not properly enforce the rate limit on its password-reset verification-code flow, keying both…