CVE-2024-13118

The IP Based Login WordPress plugin is vulnerable to a Cross-Site Request Forgery (CSRF) attack in versions prior to 2.4.1 . The root cause is a lack of CSRF checks in certain areas, which could allow an attacker to trick a logged-in user into performing a request that deletes all logs. To resolv...

CVE-2024-12800

The IP Based Login WordPress plugin versions prior to 2.4.1 is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is a failure to sanitise values during the import process , which allows high-privilege users (such as administrators) to execute malicious scripts. This vulnera...