WordPress security by component
All In One Login
Plugin description
All In One Login is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Nov 06, 2025; the highest CVE/CNA score is 5.3.
Plugin slug:
change-wp-admin-loginLatest vulnerability
CVE-2025-58595: All In One Login: Privilege escalation or authentication bypass
All In One Login is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
| Safe version |
|
||
|---|---|---|---|
| Nov 06, 2025 |
CVE-2025-58595
All In One Login: Privilege escalation or authentication bypass
All In One Login is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE5.3
NVDPending
|