Vulnerability index

Browse CVEs

5 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

MEDIUM 5.4 CVE-2023-1861EPSS 29% The Limit Login Attempts WordPress plugin through 1.7.2 does not sanitize and escape usernames when outputting them back in the logs dashboard, which…

Limit Login Attempts after 1.7.2 Fix from $1,6002023-05-02 MEDIUM 6.1 CVE-2023-1912 The Limit Login Attempts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its lock logging feature in versions up to, and includ…

Limit Login Attempts after 1.7.1 Fix from $1,6002023-04-06 CRITICAL 9.8 CVE-2022-0787EPSS 9% The Limit Login Attempts (Spam Protection) WordPress plugin before 5.1 does not sanitise and escape some parameters before using them in SQL statemen…

Limit Login Attempts 5.1+ Fix from $2,3002022-03-28 MEDIUM 6.1 CVE-2021-24657 The Limit Login Attempts WordPress plugin before 4.0.50 does not escape the IP addresses (which can be controlled by attacker via headers such as X-F…

Limit Login Attempts 4.0.50+ Fix from $1,6002021-09-20 CRITICAL 9.8 CVE-2012-10001 The Limit Login Attempts plugin before 1.7.1 for WordPress does not clear auth cookies upon a lockout, which might make it easier for remote attacker…

Limit Login Attempts 1.7.1+ Fix from $2,3002021-01-06