Title: Patchstack warning concerning 2.5.4
Last modified: January 30, 2026

---

# Patchstack warning concerning 2.5.4

 *  Resolved [nealumphred](https://wordpress.org/support/users/nealumphred/)
 * (@nealumphred)
 * [4 months, 1 week ago](https://wordpress.org/support/topic/patchstack-warning-concerning-2-5-4/)
 * I just received a notice from Patchstack concerning Custom Login Page Customizer
   2.5.4:
 * “**High priority Unauthenticated Arbitrary Password Reset vulnerability found
   in version(s) < 2.5.4**.”

Viewing 2 replies - 1 through 2 (of 2 total)

 *  Plugin Support [Abdul Wahab](https://wordpress.org/support/users/abdulwahab610/)
 * (@abdulwahab610)
 * [4 months, 1 week ago](https://wordpress.org/support/topic/patchstack-warning-concerning-2-5-4/#post-18804726)
 * Hey, [@nealumphred](https://wordpress.org/support/users/nealumphred/)
 * Yeah, this issue persisted in the < 2.5.4 version; however, it’s fixed in v2.5.4,
   and Patchstack approved. Have a look [https://patchstack.com/database/wordpress/plugin/login-customizer/vulnerability/wordpress-custom-login-page-customizer-plugin-2-5-4-unauthenticated-arbitrary-password-reset-vulnerability](https://patchstack.com/database/wordpress/plugin/login-customizer/vulnerability/wordpress-custom-login-page-customizer-plugin-2-5-4-unauthenticated-arbitrary-password-reset-vulnerability)
 * Thank you.
 *  Thread Starter [nealumphred](https://wordpress.org/support/users/nealumphred/)
 * (@nealumphred)
 * [4 months, 1 week ago](https://wordpress.org/support/topic/patchstack-warning-concerning-2-5-4/#post-18804794)
 * ABDUL
   I saw the less-than symbol (<) and it simply did not register with me.
 * Now I can reactivate version 2.5.4 on my blogs!
 * Thanks.
 * NEAL

Viewing 2 replies - 1 through 2 (of 2 total)

You must be [logged in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fpatchstack-warning-concerning-2-5-4%2F%3Foutput_format%3Dmd&locale=en_US)
to reply to this topic.

 * ![](https://ps.w.org/login-customizer/assets/icon-256x256.png?rev=2455454)
 * [Custom Login Page Customizer](https://wordpress.org/plugins/login-customizer/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/login-customizer/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/login-customizer/)
 * [Active Topics](https://wordpress.org/support/plugin/login-customizer/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/login-customizer/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/login-customizer/reviews/)

 * 3 replies
 * 2 participants
 * Last reply from: [nealumphred](https://wordpress.org/support/users/nealumphred/)
 * Last activity: [4 months, 1 week ago](https://wordpress.org/support/topic/patchstack-warning-concerning-2-5-4/#post-18804794)
 * Status: resolved