Plugin icon

Limit Login Attempts (Spam Protection)

wp-limit-failed-login-attempts

Vulnerabilities:

5

Last Updated:

June 15, 2025

Active Installs:

200

Published
Title
Fixed in
CVSS
Published
2024-12-05
Title
Limit Login Attempts < 5.6 - Unauthenticated SQL Injeciton
Fixed in
Fixed in 5.6
CVSS
7.5 (high)
Published
2024-10-07
Title
Limit Login Attempts (Spam Protection) < 5.4 - IP Address Spoofing to Protection Mechanism Bypass
Fixed in
Fixed in 5.4
CVSS
5.3 (medium)
Published
2022-03-02
Title
Limit Login Attempts (Spam Protection) < 5.1 - Unauthenticated SQLi
Fixed in
Fixed in 5.1
CVSS
8.6 (high)
Published
2021-04-22
Title
Multiple WP-Buy Plugins - Arbitrary Plugin Installation/Activation via Low Privilege User
Fixed in
Fixed in 2.9
CVSS
9.9 (critical)
Published
2021-04-22
Title
Multiple WP-Buy Plugins - Arbitrary Plugin Installation/Activation via CSRF
Fixed in
Fixed in 3.1
CVSS
9.6 (critical)