Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Limit Login Attempts Reloaded 2.25.26

  • Severity: medium-risk
  • Status: Fixed
  • Publication: December 20, 2023

The Limit Login Attempts Reloaded plugin for WordPress has a vulnerability that can allow attackers with contributor-level or higher permissions to add malicious web scripts to pages that will be executed when a user visits them. This vulnerability exists in all versions of the plugin up until version 2.25.26 and is caused by the plugin not properly sanitizing user input and not properly escaping output.

Detected in:

Limit Login Attempts Reloaded fixed vulnerable versions: >= * <= 2.25.26
Limit Login Attempts Reloaded – Login Security, Brute Force Protection, Firewall fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.