Lucene search

K
wpexploitBartlomiej MarekWPEX-ID:7EAE1434-8C7A-4291-912D-A4A07B73EE56
HistorySep 21, 2023 - 12:00 a.m.

DoLogin Security < 3.7.1 - Subscriber+ IP Address leak

2023-09-2100:00:00
Bartlomiej Marek
64
dologin security ip leak exploit

EPSS

0.001

Percentile

21.4%

Description The plugin does not restrict the access of a widget that shows the IPs of failed logins to low privileged users.

Just login to subscriber account and go to: http://localhost/wp-admin/index.php#log

EPSS

0.001

Percentile

21.4%

Related for WPEX-ID:7EAE1434-8C7A-4291-912D-A4A07B73EE56