Plugin icon

Limit Login Attempts Reloaded – Login Security, Brute Force Protection, Firewall

limit-login-attempts-reloaded

Vulnerabilities:

4

Last Updated:

December 16, 2025

Active Installs:

2000000

Published
Title
Fixed in
CVSS
Published
2023-12-20
Title
Limit Login Attempts Reloaded < 2.25.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 2.25.27
CVSS
6.4 (medium)
Published
2023-11-06
Title
Limit Login Attempts Reloaded < 2.25.26 - Admin+ Missing Authorization to Toggle Plugin Auto-Update
Fixed in
Fixed in 2.25.26
CVSS
2.7 (low)
Published
2020-12-14
Title
Limit Login Attempts Reloaded < 2.16.0 - Authenticated Reflected Cross-Site Scripting
Fixed in
Fixed in 2.16.0
CVSS
8.4 (high)
Published
2020-12-14
Title
Limit Login Attempts Reloaded < 2.17.4 - Login Rate Limiting Bypass
Fixed in
Fixed in 2.17.4
CVSS
3.7 (low)