PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-49058 LoginPress CVE debrief

A critical vulnerability, CVE-2026-49058, was found in the LoginPress Pro plugin (versions <= 6.2.2). This vulnerability allows for unauthenticated privilege escalation, posing a significant risk to WordPress installations using the affected plugin. The CVSS score of 9.8 indicates a high severity level. Users of the LoginPress Pro plugin should take immediate action to mitigate this vulnerability.

Vendor
LoginPress
Product
LoginPress Pro
CVSS
CRITICAL 9.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-17
Original CVE updated
2026-06-17
Advisory published
2026-06-17
Advisory updated
2026-06-17

Who should care

Administrators and security teams responsible for WordPress installations using the LoginPress Pro plugin, especially those with versions <= 6.2.2, should prioritize patching this vulnerability to prevent potential exploitation.

Technical summary

CVE-2026-49058 is a critical vulnerability in the LoginPress Pro plugin, allowing unauthenticated privilege escalation. The vulnerability has a CVSS score of 9.8 and is classified under CWE-266. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating a high severity level.

Defensive priority

high

Recommended defensive actions

  • Update the LoginPress Pro plugin to a version greater than 6.2.2.
  • Implement a Web Application Firewall (WAF) to detect and prevent exploitation attempts.
  • Regularly monitor WordPress installations for updates and security patches.
  • Use strong authentication and authorization mechanisms for WordPress users.
  • Limit access to sensitive areas of the WordPress installation.
  • Perform regular security audits and vulnerability assessments.
  • Consider using a security plugin to enhance WordPress security.

Evidence notes

The vulnerability was reported by Patchstack and is documented in the CVE record. The CVE was published on June 17, 2026, and the NVD provides additional details.

Official resources

public