Limit Login Attempts Reloaded < 2.17.4 - Login Rate Limiting Bypass

When the plugin is configured with a custom header in its Trusted IP Origins setting (e.g X-Forwarded-For), attackers could bypass the protection offered by tampering the header sent in requests.