Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: CipherCoin Component: Wp Limit Login Attempts Clear all filters
TI-2022-03941 CVE-2022-4303 · GHSA-mpvm-97hc-j3fx

WP Limit Login Attempts <= 2.6.4 - IP Spoofing

Priority HIGH 72

The WP Limit Login Attempts WordPress plugin through 2.6.4 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based restrictions on login forms.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00711 Published 2023-01-23 No fix listed CWE-290
TI-2015-05728 CVE-2015-6829 · GHSA-v4fj-7hcj-whx2

Multiple SQL injection vulnerabilities in the getip function in…

Priority LOW 37

Multiple SQL injection vulnerabilities in the getip function in wp-limit-login-attempts.php in the WP Limit Login Attempts plugin before 2.0.1 for WordPress allow remote attackers to execute arbitrary SQL commands via th…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0235 Published 2015-09-16 No fix listed CWE-89