CVE-2026-18752 | lukeseager Persistent Login Plugin up to 3.1.0 on WordPress Login History wppl_device_id sql injection

A vulnerability was found in lukeseager Persistent Login Plugin up to 3.1.0 on WordPress. It has been declared as critical. The impacted element is an unknown function of the component Login History. The manipulation of the argument wppl_device_id results in sql injection.

This vulnerability is identified as CVE-2026-18752. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More