Limit Login Attempts (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-05-02. Vendor: Unknown.

CVEs of Limit Login Attempts

• CVE-2023-1861 - CVSS 5.4 (medium), 2023-05-02: The Limit Login Attempts WordPress plugin through 1.7.2 does not sanitize and escape usernames when outputting them back in the logs dashboard, which could…
• CVE-2022-1029 - CVSS 4.8 (medium), 2022-06-27: The Limit Login Attempts WordPress plugin before 4.0.72 does not sanitise and escape some of its settings, leading to malicious users with administrator…
• CVE-2021-24657 - CVSS 6.1 (medium), 2021-09-20: The Limit Login Attempts WordPress plugin before 4.0.50 does not escape the IP addresses (which can be controlled by attacker via headers such as…