Limit Login Attempts vulnerabilities

1 known vulnerability in Limit Login Attempts from Limit Login Attempts Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Limit Login Attempts (Spam Protection): Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-0787Mar 28, 2022Limit Login Attempts (Spam Protection)EPSS 7.52%

  The Limit Login Attempts (Spam Protection) WordPress plugin before 5.1 does not sanitise and escape some parameters before using them in SQL statements via AJAX actions (available to unauthenticated users), leading to SQL Injections