WP Limit Login Attempts vulnerabilities
We track 1 vulnerability in WP Limit Login Attempts products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 23, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest WP Limit Login Attempts vulnerabilities
- 7.5 High severity
WP Limit Login Attempts: Authentication Bypass by Spoofing
The WP Limit Login Attempts WordPress plugin through 2.6.4 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based restrictions on login forms.