Known vulnerabilities in Saad Iqbal All In One Login
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-94175 | Unauthenticated Cross Site Scripting (XSS) in All In One Login <= 2.4.1 versions | 7.1 High | Oct 30, 2026 |
| CVE-2025-58595 | Authentication Bypass by Spoofing vulnerability in Saad Iqbal All In One Login change-wp-admin-login allows Identity… | 5.3 Medium | Nov 6, 2025 |