CVE-2017-12650

SQL Injection exists in the Loginizer plugin before 1.3.6 for WordPress via the X-Forwarded-For HTTP header.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-08-07

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Loginizer (Loginizer)

References

• https://blog.wpscans.com/sql-injection-and-csrf-security-vulnerability-in-loginizer/
• https://sv.wordpress.org/plugins/loginizer/#developers
• https://wpvulndb.com/vulnerabilities/8883