CVE-2023-4549

CVE-2023-4549 concerns the DoLogin Security WordPress plugin, affected versions prior to 3.7. The vulnerability stems from improper sanitization of IPs from the X-Forwarded-For header, enabling a stored Cross-Site Scripting (XSS) attack through WordPress’ login form. Public references in the prov...

CVE-2023-4631

The DoLogin Security WordPress plugin (versions prior to 3.7) is affected. The root cause is the plugin using headers like X-Forwarded-For to obtain the request IP, which can enable IP spoofing. Public sources (NVD/Red Hat and related advisories) indicate the affected product and version, with CV...

CVE-2023-4800

Affected software: DoLogin Security WordPress plugin (before 3.7.1). Vulnerability: The widget displaying IPs of failed logins is accessible to low-privileged users, exposing potentially sensitive data. Impact (as stated): Sensitive data exposure (high confidentiality impact per the published CVS...