CVE-2022-4534: Use of Less Trusted Source

The Limit Login Attempts Spam Protection plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 5.3. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can suppl...

CVE-2022-0787: Improper Neutralization of Special Elements used in an SQL Command

The Limit Login Attempts Spam Protection WordPress plugin before 5.1 does not sanitise and escape some parameters before using them in SQL statements via AJAX actions available to unauthenticated users, leading to SQL Injections...

PT-2022-13440

Name of the Vulnerable Software and Affected Versions Limit Login Attempts Spam Protection WordPress plugin versions prior to 5.1 Description The issue concerns the Limit Login Attempts Spam Protection WordPress plugin, where certain parameters are not properly sanitized and escaped before being...