All packages
Loops & Logic vulnerabilities
3 known CVE vulnerabilities in Loops & Logic, translated and rated.
- CVE-2026-95604High
Unauthenticated Broken Access Control in Loops & Logic <= 4.2.4 versions.
- CVE-2026-16960High
The Loops & Logic WordPress plugin before version 4.3.0 does not restrict its public template-data action to the data a visitor is permitted to see. This allows unauthenticated users to read arbitrary user records (including email addresses and roles) and arbitrary site options.
- CVE-2026-57391Medium
The Loops & Logic WordPress plugin contains a Stored Cross-Site Scripting (XSS) vulnerability due to improper input neutralization during page generation. All versions up to and including 4.2.3 are affected.