What’s Vulnerable › Products

Login & Register Forms vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Login & Register Forms version is affected

Latest Login & Register Forms vulnerabilities

• CVE-2026-18470 — Login & Register Forms < 4.0.2 - Unauthenticated Registered User Email Address Disclosure via Lost Password Response (CVSS 7.5)
• CVE-2026-18469 — Login & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Code Brute Force (CVSS 8.1)
• CVE-2026-18468 — Login & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Verification State Keyed on a Client-Supplied Address Header (CVSS 8.1)
• CVE-2026-14836 — Login/Signup Popup < 3.2.5 - Unauthenticated Account Takeover via Password Reset Rate Limit Bypass (CVSS 8.1)