WordPress Limit Login Attempts Reloaded Plugin <= 2.25.26 is vulnerable to Cross Site Scripting (XSS)

Software Limit Login Attempts Reloaded Type Plugin Vulnerable versions = 2.25.26 Fixed in 2.25.27 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6934 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2de2d139dd65 Credits Hung...

PT-2023-32155 · WordPress · Limit-Login-Attempts-Reloaded

Name of the Vulnerable Software and Affected Versions: Limit Login Attempts Reloaded WordPress plugin versions prior to 2.25.26 Description: The issue is related to missing authorization on the toggle auto update AJAX action. This allows any user with a valid nonce to toggle the auto-update statu...