cbcvebase.

Automattic Limit Login Attempts vulnerabilities

1 known vulnerability affecting automattic/limit_login_attempts.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2023-1912P4MEDIUMCVSS 6.1≤ 1.7.12023-04-06
CVE-2023-1912 [MEDIUM] CWE-79 CVE-2023-1912: The Limit Login Attempts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its l The Limit Login Attempts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its lock logging feature in versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever an administra
nvd
Automattic Limit Login Attempts vulnerabilities | cvebase