Limit Login Attempts Security vulnerabilities
We track 2 vulnerabilities in Limit Login Attempts Security products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Limit Login Attempts Security vulnerabilities
- 7.5 High severity
Limit Login Attempts Security: Improper Authentication
The Limit Login Attempts Security WordPress plugin before 3.4.1 does not confirm that its two-factor authentication step succeeded before completing a login and treats a failure to build that step as success, so an attacker who holds a protected user's passwor
- 7.5 High severity
Limit Login Attempts Security: Improper Authentication
The Limit Login Attempts Security WordPress plugin before 3.4.1 does not enforce its two-factor authentication on every password-authentication route, so an attacker who already knows a protected user's password can authenticate through an alternative login in