Unauthenticated Privilege Escalation in LoginPress Pro by WPManageNinja

CVE-2026-49058

What is CVE-2026-49058?

The LoginPress Pro plugin, developed by WPManageNinja, is susceptible to an unauthenticated privilege escalation vulnerability. This security flaw allows attackers to exploit certain functionalities within the plugin without prior authentication checks, potentially leading to unauthorized access and control over site functionalities. Users running versions up to 6.2.2 are particularly at risk, making it imperative to update to the latest version to ensure their WordPress installations remain secure.

References