CVE-2024-13118

The IP Based Login WordPress plugin, in versions prior to 2.4.1 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF checks in specific areas of the plugin. An attacker can exploit this vulnerability to trick a logged-in user into performing an action th...

CVE-2024-12800

The IP Based Login WordPress plugin versions prior to 2.4.1 contains a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is a failure to sanitise values during the import process. This flaw allows high-privilege users, such as administrators, to perform Stored XSS attacks, even in e...