Dologin Security (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-10-16. Vendor: Unknown.

CVEs of Dologin Security

• CVE-2023-4800 - CVSS 6.5 (medium), 2023-10-16: The DoLogin Security WordPress plugin before 3.7.1 does not restrict the access of a widget that shows the IPs of failed logins to low privileged users.
• CVE-2023-4631 - CVSS 5.3 (medium), 2023-09-25: The DoLogin Security WordPress plugin before 3.7 uses headers such as the X-Forwarded-For to retrieve the IP address of the request, which could lead to IP…
• CVE-2023-4549 - CVSS 6.1 (medium), 2023-09-25: The DoLogin Security WordPress plugin before 3.7 does not properly sanitize IP addresses coming from the X-Forwarded-For header, which can be used by…